ITSI Adaptive thresholding per entity

sapanda · ‎03-22-2019

Hello all,

I am exploring ways to enable adaptive thresholds for entities in ITSI. As per Splunk Documentation, Adaptive thresholds are not allowed to be configured per entity. I would like to know if anybody has explored to do this with any customizations?

thanks,
Sapan

yannK · ‎10-24-2019

True, the thresholds per entity are not yet possible.
If you have a support contract, do not hesitate to open an Enhancement Request.

ITSI Adaptive thresholding per entity

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Join the Hackathon at .conf26 and build a No-Code AI agent

Join the Conversation

ITSI Adaptive thresholding per entity

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Join the Hackathon at .conf26 and build a No-Code AI agent