ITSI : Entity Alias Filtering will be removed in a future release

[ewan000]

When we are editing base searches we get the warning:

“Entity Alias Filtering will be removed in a future release”

The help link doesn’t take you anywhere with any information on this and we are relying heavily on entity filtering.

What’s the plans in the space and how should we prepare for them?

ITSI v4.1.1

[hlourens_splunk]

Hi ewan000

I found the link to the documentation that you were looking for https://docs.splunk.com/Documentation/ITSI/4.1.0/ReleaseNotes/Removedfeatures#Entity_Alias_Filtering... . In terms of getting the KPI to filter for specific entities you would just need to set it up a bit differently.

You can find more information around the removed feature here in Splunk's ITSI documentation.

Hope that helps.

Herman