Splunk ITSI

Where are the ITSI Scheduled Recurring Entities Searches Saved

MKKstw
Engager

After running an initial import of data for Entities in ITSI 4.0.3, there is the option to schedule recurring searches for that same AdHoc search.

Where are these searches saved? I saved one a few days ago, and I need to delete it, but I've been unable to locate it.

Any suggestions?

Thank you!

gpark2_splunk
Splunk Employee
Splunk Employee

The recurring entities searches are stored as a modular input.

Settings -> Data Inputs -> IT Service Intelligence CSV Import

Additional info is here:
https://docs.splunk.com/Documentation/ITSI/4.0.3/Configure/DefineEntities#Set_up_recurring_import

irmerm
New Member

We're running a search head cluster, and the Data Inputs page is not available. Suggestions?

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...