Splunk ITSI

Is there a way to list all the Services and its KPI's in ITSI Box

vicky05ssr
Explorer

In normal Splunk Enterprise we can list all the savedsearch using rest command like below

| rest /servicesNS/-/MYAPP/saved/searches

So I wanted a rest command similar to above to list all the Services made in the ITSI App.

Please someone provide me the query.

0 Karma

PowerPacked
Builder

Hi @vicky05ssr

Please use this search, it will list all the Service and KPI's associated with it.

| inputlookup service_kpi_lookup | rename title as ServiceTitle kpis.title as KPITitle | stats count by ServiceTitle, KPITitle | mvcombine KPITitle

Thanks

PowerPacked
Builder

Approve the answer, if this helps you.

Thanks

0 Karma

vicky05ssr
Explorer

thank you!

0 Karma

PowerPacked
Builder

Hi @vicky05ssr

If you only want the rest call way, Here is the query.

| rest splunk_server=local servicesNS/nobody/SA-ITOA/itoa_interface/service fields="title,_key,kpis._key,kpis.title"

Thanks

0 Karma
Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...