Splunk ITSI

Episodes not creating after upgrading ITSI to latest version 4.17.1

Ka21
Loves-to-Learn

Hi Team,

we facing issue in our environment, as Episodes are not generating after upgrading of ITSI 4.17.1 version.
And everything is enabled (Services, Correlation searches, NEAP policies) and even though it is not creating.
ITSI_event_grouping is enabled and Rules engine is working fine.

Please provide solution for this.

Labels (1)
0 Karma

Abhishek-Nanda
New Member

@Ka21  is this fixed? You found any solution?

0 Karma
Get Updates on the Splunk Community!

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureThursday, March 27, 2025  |  11AM PST / 2PM EST | Register NowStep boldly ...

Splunk AppDynamics with Cisco Secure Application

Web applications unfortunately present a target rich environment for security vulnerabilities and attacks. ...