I created (via csv import) and then deleted (via Configure Services UI) a bunch of services which were dependent services of other services.
The expected behaviour for me was that this would remove the nodes from the Service Analyzer diagram.
However, I am left with a blank node to joining the services which depended on the deleted service.
Is this a bug? How can i get rid of the blank node?
we are on ITSI 4.1.1 Splunk Enterprise 7.1.3
got some erros in the log, not sure if they are related
[itsi.consumer] [init] [exception] [48538] Saved search "Indicator - ecd48ed9-7874-4650-a885-36ff77817683 - ITSI Search" was not found, ignoring delete
This seems like a bug in your version. What version are you running? I just replicated your steps in my ITSI 4.0 environment and it didn't leave behind the unlabeled service.
we are on itsi 4.1.1 it seems to be related to mass deletes, im deleting 100's of services