Hello,
NEW INFO BELOW
Looking a detailed doc/vid on Service Analyzer (SA).
Having issues with permitting users an pre-filtered SA and blocking their ability to switch to another filter, or turn off filtering completely.
My flawed(?) understanding is there is really only a single SA which contains every service within ITSI. Using Teams, we should be able to create other SAs permitting permitting different access. However, that is not working; or I am missing something in the process. While I can save a new SA with the filter on service or tag in place; the user can click the X on the service or tag filter and see all services and tags available, including CPs, which they do not have read/write permissions to.
===================================
Here are some more details.
Here is the SA. We want the tre_user to see only the top section (11 services); while the the bottom section should not be visible in the SA, but accessible from the GT.
Checkout this forum question of WHY we need to an individual service for each entity.
Using Aliases in Deep Dives and with other ITSI components(?)
Is there an easier way to do the above?
As a side question. Working with GT or Dashboard Studio (DS) we have come across some editing issues we did not experience in Classic Dashboards. We used to be able to develop in separate CD and then copy the rows/panels from these separate CDs into the main CD. Development was efficient.
Now with GT/DS, we can't do this. Only one developer at a time can work on the GT/DS. And if another developer left their GT/DS open, even if it was not in Edit mode; if they clicked Edit without refreshing or exiting and returning first, the first developers code was gone.
Any best practice tips on how you and your teams have handled this? It is really time consuming.
Thanks in advance and God bless,
Genesius
It sounds like you want to restrict users to a specific, pre-filtered view in Service Analyzer and prevent them from removing or changing those filters.
To clarify, Service Analyzer itself is a single app that displays all services in ITSI, and filters applied through the UI are generally user-controlled. Teams and roles in ITSI control access to services and KPIs, but they don’t inherently restrict filter controls within Service Analyzer.
Some questions to better understand your setup:
Getting clarity on these points can help determine if the behavior is expected or if additional permission configurations are needed.
If this helps, some karma would be appreciated!
I've listed more details in my original post.
Here are answers to your questions.
Thanks and God bless,
Genesius
Hi @genesiusj
I wonder if these pages help you in terms of SA? https://www.splunk.com/en_us/pdfs/getting-started/splunk-getting-started-with-itsi.pdf
https://docs.splunk.com/Documentation/ITSI/4.20.1/SI/AboutSA
🌟 Did this answer help you? If so, please consider:
Your feedback encourages the volunteers in this community to continue contributing.
@livehybrid
Thanks. I will check out those links.
I've listed more details in my original post.
God bless.