Splunk ITSI

Is there a way to do a bulk threshold update in Splunk ITSI?

mjlsnombrado
Communicator

We need to update the threshold of a KPI, the KPI is used by 100+ services and some of these services have the thresholding unlinked from the Service Template.

Is there a macro or saved search that we can use to do a bulk update of the KPI threshold settings?  this is for the Services which thresholding is already unlinked to the Service Template to avoid manually opening each service to edit the KPI thresholds. 

TIA. 

Labels (4)
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...