Splunk ITSI

Entity xxxxidx2 in KPI Indexers -How to resolve this error?

maityayan1996
Path Finder

See i am getting this type of error message in ITSI.

Entity xxxxidx2 in KPI Indexers - Indexing queue associated with service Indexers was dropped from cohesive analysis. Maximum entity limit is 30.

Please help to solve this issue.
Thanks in advance

 

Labels (1)
0 Karma

skramp
SplunkTrust
SplunkTrust

You have configured an anomaly detection but you have to many entities, maximum ist 30.
https://docs.splunk.com/Documentation/ITSI/4.13.1/SI/AD

0 Karma
Get Updates on the Splunk Community!

Detecting Cross-Channel Fraud with Splunk

This article is the final installment in our three-part series exploring fraud detection techniques using ...

Splunk at Cisco Live 2025: Learning, Innovation, and a Little Bit of Mr. Brightside

Pack your bags (and maybe your dancing shoes)—Cisco Live is heading to San Diego, June 8–12, 2025, and Splunk ...

Splunk App Dev Community Updates – What’s New and What’s Next

Welcome to your go-to roundup of everything happening in the Splunk App Dev Community! Whether you're building ...