Splunk ITSI

Splunk query to get the threshold values of different KPI's in ITSI.

Kumar23
Loves-to-Learn
 
Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust
What is your question?
---
If this reply helps you, Karma would be appreciated.
0 Karma

Kumar23
Loves-to-Learn

Hi @richgalloway did you understand my query? Please let me know for any further information.

 

Thanks,

Kumar23

0 Karma

richgalloway
SplunkTrust
SplunkTrust
No, I don't, but I replied only because your posting was empty.
eduncan has suggested a solution. I suggest you consider it.
---
If this reply helps you, Karma would be appreciated.
0 Karma

Kumar23
Loves-to-Learn

We will set the threshold values  for KPI's like High, Medium, Normal in ITSI right. I need  a query to get   that threshold values  for various KPI's.

0 Karma

eduncan
Splunk Employee
Splunk Employee

You can use this content pack:https://docs.splunk.com/Documentation/ITSICP/current/Config/AboutMA and it has corr searches that bring back KPI status.  You can use these as your starting point.  It will not tell you what the threshold is, rather if it is passed.  You don't need to pull the threshold setting you need to pull whether it has passed the threshold and then you can alert on it.

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...