Splunk ITSI

Is there a way to do a bulk threshold update in Splunk ITSI?

mjlsnombrado
Communicator

We need to update the threshold of a KPI, the KPI is used by 100+ services and some of these services have the thresholding unlinked from the Service Template.

Is there a macro or saved search that we can use to do a bulk update of the KPI threshold settings?  this is for the Services which thresholding is already unlinked to the Service Template to avoid manually opening each service to edit the KPI thresholds. 

TIA. 

Labels (4)
0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.0.2 Availability: On cloud and On-premise!

A few months ago, we released Splunk Enterprise Security 8.0 for our cloud customers. Today, we are excited to ...

Logs to Metrics

Logs and Metrics Logs are generally unstructured text or structured events emitted by applications and written ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...