Splunk ITSI

How to Create sub Services in Splunk ITSI

nasrinmulani
New Member

Hi All,

I need to know how to create sub services, for example "Laptop" will be main service and then "Laptop-CPU" "Laptop-Performance" , these will be sub services under "Laptop" Service.
When we will drag and drop the service health of Laptop service on Glass table then we should get the overall health of all the services.

Anyone knows about how to create sub service, please let me know.

Thanks in Advance!!

0 Karma
1 Solution

PowerPacked
Builder

Hi @nasrinmulani

In the above case, Laptop-CPU & Laptop-Performance should be considered as entities of Laptop.

in either bulk import or single creation, you will have option of service dependency tree. from where you can configure whih entities are treated as sub services under main service.

& coming to service health of main service always depends on service health of sub services.

------ service health score of sub services are considered as kpis of importance of 11 in main service. ---- if any of the sub services fails the main service automatically turns into critical.

Have a look at these docs.
https://docs.splunk.com/Documentation/ITSI/3.1.1/Configure/Addservicedependencies

Thanks

View solution in original post

0 Karma

nasrinmulani
New Member

Thanks you!!

It's really helpful

0 Karma

PowerPacked
Builder

Hi @nasrinmulani

In the above case, Laptop-CPU & Laptop-Performance should be considered as entities of Laptop.

in either bulk import or single creation, you will have option of service dependency tree. from where you can configure whih entities are treated as sub services under main service.

& coming to service health of main service always depends on service health of sub services.

------ service health score of sub services are considered as kpis of importance of 11 in main service. ---- if any of the sub services fails the main service automatically turns into critical.

Have a look at these docs.
https://docs.splunk.com/Documentation/ITSI/3.1.1/Configure/Addservicedependencies

Thanks

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...