- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Using the Splunk IT Service Intelligence service analyzer feature, how do you separate views of services/entities?
luke222010
Engager
11-06-2018
05:00 AM
I can see in the Service Analyzer that you can create individual Service Analyzer views.
However, when creating a new one, I inherit all services and entities from my default Service Analyzer view.
Is this intended behavior, and if so, how can we create a blank Service Analyzer view where we can populate it with other services and entities?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

hjauch_splunk

Splunk Employee
11-06-2018
09:07 AM
When you create a new service analyzer, you start with a standard service analyzer view, then you customize it and save it. See https://docs.splunk.com/Documentation/ITSI/4.0.2/User/Createcustomserviceanalyzers
For example, it you only want to show the "Active Directory" service, then you would filter it to this service and click Save.
