Hello,
Looking a detailed doc/vid on Service Analyzer (SA).
Having issues with permitting users an pre-filtered SA and blocking their ability to switch to another filter, or turn off filtering completely.
My flawed(?) understanding is there is really only a single SA which contains every service within ITSI. Using Teams, we should be able to create other SAs permitting permitting different access. However, that is not working; or I am missing something in the process. While I can save a new SA with the filter on service or tag in place; the user can click the X on the service or tag filter and see all services and tags available, including CPs, which they do not have read/write permissions to.
Thanks in advance and God bless,
Genesius
It sounds like you want to restrict users to a specific, pre-filtered view in Service Analyzer and prevent them from removing or changing those filters.
To clarify, Service Analyzer itself is a single app that displays all services in ITSI, and filters applied through the UI are generally user-controlled. Teams and roles in ITSI control access to services and KPIs, but they don’t inherently restrict filter controls within Service Analyzer.
Some questions to better understand your setup:
Getting clarity on these points can help determine if the behavior is expected or if additional permission configurations are needed.
If this helps, some karma would be appreciated!
Hi @genesiusj
I wonder if these pages help you in terms of SA? https://www.splunk.com/en_us/pdfs/getting-started/splunk-getting-started-with-itsi.pdf
https://docs.splunk.com/Documentation/ITSI/4.20.1/SI/AboutSA
🌟 Did this answer help you? If so, please consider:
Your feedback encourages the volunteers in this community to continue contributing.