Splunk ITSI

Splunk ITSI: Not Seeing Results in Deep Dive

TylerJVitale
Explorer

I'm trying to investigate a spike in events that occurred this weekend, but in my deep dive, it says there are no results. However, when I edit my KPI and look at the thresholding (and when I run the search), I do get results.

Does anyone know why I'm seeing results everywhere except in my deep dive?

Edit: I cloned one of the KPIs and now see results for it in Deep Dive. I still see no results for the old KPIs though.

0 Karma
Get Updates on the Splunk Community!

BORE at .conf25

Boss Of Regular Expression (BORE) was an interactive session run again this year at .conf25 by the brilliant ...

OpenTelemetry for Legacy Apps? Yes, You Can!

This article is a follow-up to my previous article posted on the OpenTelemetry Blog, "Your Critical Legacy App ...

UCC Framework: Discover Developer Toolkit for Building Technology Add-ons

The Next-Gen Toolkit for Splunk Technology Add-on Development The Universal Configuration Console (UCC) ...