Splunk ITSI

Is there a way to list all the Services and its KPI's in ITSI Box

vicky05ssr
Explorer

In normal Splunk Enterprise we can list all the savedsearch using rest command like below

| rest /servicesNS/-/MYAPP/saved/searches

So I wanted a rest command similar to above to list all the Services made in the ITSI App.

Please someone provide me the query.

0 Karma

PowerPacked
Builder

Hi @vicky05ssr

Please use this search, it will list all the Service and KPI's associated with it.

| inputlookup service_kpi_lookup | rename title as ServiceTitle kpis.title as KPITitle | stats count by ServiceTitle, KPITitle | mvcombine KPITitle

Thanks

PowerPacked
Builder

Approve the answer, if this helps you.

Thanks

0 Karma

vicky05ssr
Explorer

thank you!

0 Karma

PowerPacked
Builder

Hi @vicky05ssr

If you only want the rest call way, Here is the query.

| rest splunk_server=local servicesNS/nobody/SA-ITOA/itoa_interface/service fields="title,_key,kpis._key,kpis.title"

Thanks

0 Karma
Get Updates on the Splunk Community!

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...

Your Voice Matters! Help Us Shape the New Splunk Lantern Experience

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...