How do I access the data in the maintenance_calendar KV Store for ITSI?

[andrewtrobec]

Hello!

According to ITSI documentation (https://docs.splunk.com/Documentation/ITSI/4.17.1/Configure/KVPerms) there is a KV store called "maintenance_calendar" that contains maintenance window details.

I need to run some searches on the schedules, but I cannot access the data in the KV store due to the error: 

Is it possible to achieve what I am looking to do? 

Thank you and best regards,

Andrew

[andrewtrobec]

@anatolvd  This gets the job done, I didn't think of that! Thank you!

[anatolvd · Accepted solution]

Hey @andrewtrobec , while the collection name is indeed maintenance_calendar, the lookup definition name is itsi_maintenance_calendar, so give that a try instead. I suspect you will have to play around with the Supported fields for the schedules themselves to come up.

Let me know if this helps,

avd