ITSI Adaptive thresholding per entity

sapanda · ‎03-22-2019

Hello all,

I am exploring ways to enable adaptive thresholds for entities in ITSI. As per Splunk Documentation, Adaptive thresholds are not allowed to be configured per entity. I would like to know if anybody has explored to do this with any customizations?

thanks,
Sapan

yannK · ‎10-24-2019

True, the thresholds per entity are not yet possible.
If you have a support contract, do not hesitate to open an Enhancement Request.

ITSI Adaptive thresholding per entity

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Ditch the Manual Grind: Building AI Agents with Splunk

Cisco Data Fabric from Architecture to Investigation, Better SOC Visibility, and More ...

Join the Conversation

ITSI Adaptive thresholding per entity

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Ditch the Manual Grind: Building AI Agents with Splunk

Cisco Data Fabric from Architecture to Investigation, Better SOC Visibility, and More ...