Splunk IT Service Intelligence: How do you map the single KPI to Multiple services?

[harish_l]

I have created 500 services in Splunk IT Service Intelligence (ITSI) and mapped the entities and I have created one KPI base search. I want to map this KPI to all 500 services. Anyone please let me know if there is any possible way to assign the kpi to multiple service? or any bulk option available in ITSI.

[esnyder_splunk]

Hi Harish, the best way would be to create a a service template containing that KPI base search, and then link all 500 of those services to the service template: https://docs.splunk.com/Documentation/ITSI/latest/Configure/Linkservicetotemplate

You can't bulk link services to templates through the UI, but you can achieve this through the REST API: https://docs.splunk.com/Documentation/ITSI/latest/RESTAPI/ITSIRESTAPIreference#itoa_interface.2Fserv...