- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Who created Services in ITSI
![Reddi694325 Reddi694325](https://community.splunk.com/legacyfs/online/avatars/535992.jpg)
In my ITSI environment already some Services and KPIs are configured. Wanted to know by whom created those Services and KPIs.
Thanks in Advance
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
![PowerPacked PowerPacked](https://community.splunk.com/legacyfs/online/avatars/512078.jpg)
Hi Reddi694325
ITSI default installation comes with modules like Application server module, database module, operating system module, etc.
These modules have the services, entities, KPIS created for generic use so that you can use or duplicate them according to your use case.
You can always delete these Services, entities, kpis, from Configure section in ITSI UI app, or completely removing these modules from service side.
Thanks
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
![Reddi694325 Reddi694325](https://community.splunk.com/legacyfs/online/avatars/535992.jpg)
Thanks for the reply. I don't have access to _internal index. Is there any other way to find it?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
![Azeemering Azeemering](https://community.splunk.com/legacyfs/online/avatars/407394.jpg)
Good question...hard to answer as they aren't exactly like knowledge objects.
What I did find is that when I create a service and then check in Splunk own's internal logging I see a match:
index = _internal sourcetype=itsi_internal_log component="itsi.services" objecttype=service method=create
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
![Reddi694325 Reddi694325](https://community.splunk.com/legacyfs/online/avatars/535992.jpg)
Thanks for your answer. But I don't have access to _internal index. Is there any other way?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
![Azeemering Azeemering](https://community.splunk.com/legacyfs/online/avatars/407394.jpg)
The only other thing you can look at is the kvstore / lookups that might give you and indication who created them. But I cannot see a 1 to 1 relation between those and a created service.
![](/skins/images/53C7C94B4DD15F7CACC6D77B9B4D55BF/responsive_peak/images/icon_anonymous_message.png)