Splunk ITSI

Is there a way to list all the Services and its KPI's in ITSI Box

vicky05ssr
Explorer

In normal Splunk Enterprise we can list all the savedsearch using rest command like below

| rest /servicesNS/-/MYAPP/saved/searches

So I wanted a rest command similar to above to list all the Services made in the ITSI App.

Please someone provide me the query.

0 Karma

PowerPacked
Builder

Hi @vicky05ssr

Please use this search, it will list all the Service and KPI's associated with it.

| inputlookup service_kpi_lookup | rename title as ServiceTitle kpis.title as KPITitle | stats count by ServiceTitle, KPITitle | mvcombine KPITitle

Thanks

PowerPacked
Builder

Approve the answer, if this helps you.

Thanks

0 Karma

vicky05ssr
Explorer

thank you!

0 Karma

PowerPacked
Builder

Hi @vicky05ssr

If you only want the rest call way, Here is the query.

| rest splunk_server=local servicesNS/nobody/SA-ITOA/itoa_interface/service fields="title,_key,kpis._key,kpis.title"

Thanks

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...