Splunk ITSI

Splunk query to get the threshold values of different KPI's in ITSI.

Kumar23
Loves-to-Learn
 
Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust
What is your question?
---
If this reply helps you, Karma would be appreciated.
0 Karma

Kumar23
Loves-to-Learn

Hi @richgalloway did you understand my query? Please let me know for any further information.

 

Thanks,

Kumar23

0 Karma

richgalloway
SplunkTrust
SplunkTrust
No, I don't, but I replied only because your posting was empty.
eduncan has suggested a solution. I suggest you consider it.
---
If this reply helps you, Karma would be appreciated.
0 Karma

Kumar23
Loves-to-Learn

We will set the threshold values  for KPI's like High, Medium, Normal in ITSI right. I need  a query to get   that threshold values  for various KPI's.

0 Karma

eduncan
Splunk Employee
Splunk Employee

You can use this content pack:https://docs.splunk.com/Documentation/ITSICP/current/Config/AboutMA and it has corr searches that bring back KPI status.  You can use these as your starting point.  It will not tell you what the threshold is, rather if it is passed.  You don't need to pull the threshold setting you need to pull whether it has passed the threshold and then you can alert on it.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...