Splunk ITSI

Episodes not creating after upgrading ITSI to latest version 4.17.1

Ka21
Loves-to-Learn

Hi Team,

we facing issue in our environment, as Episodes are not generating after upgrading of ITSI 4.17.1 version.
And everything is enabled (Services, Correlation searches, NEAP policies) and even though it is not creating.
ITSI_event_grouping is enabled and Rules engine is working fine.

Please provide solution for this.

Labels (1)
0 Karma

Abhishek-Nanda
New Member

@Ka21  is this fixed? You found any solution?

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.0.2 Availability: On cloud and On-premise!

A few months ago, we released Splunk Enterprise Security 8.0 for our cloud customers. Today, we are excited to ...

Logs to Metrics

Logs and Metrics Logs are generally unstructured text or structured events emitted by applications and written ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...