Splunk ITSI

Where to find "Detected Anomaly" notable events in ITSI

vl951f
Path Finder

Our ITSI is showing some "Detected Anomaly" for the kpi "Index Usage".

vl951f_0-1632772612938.png

 

Where and how can I find the notable events for those "Detected Anomaly"?

I didn't find then in index=itsi_tracked_alerts.

Thanks

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.0.2 Availability: On cloud and On-premise!

A few months ago, we released Splunk Enterprise Security 8.0 for our cloud customers. Today, we are excited to ...

Logs to Metrics

Logs and Metrics Logs are generally unstructured text or structured events emitted by applications and written ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...