Splunk ITSI

Why are my KPIs not taking the defined entities?

AnushaJone
New Member

Hi,

 

I have been building OS monitoring KPIs for our agency.  As part of this process we defined entities as below

 

itsi entity mgmt - index=indexname host=*controlm* | dedup host  | eval entity_type=coalesce(entity_type, "controlm") | table host entity_type

 

it's listing the hosts that are associated to controlm agency.  I am taking entity rule like below

Alias is host and matches *controlm* but why my KPIs are not automatically running against these hosts defined in entities?

Labels (1)
0 Karma

skramp
SplunkTrust
SplunkTrust

You have imported your entities (I assume you check them in the entity management) and you have added them to your service. But you have also configured in your KPIs to split by host and take only entities which are for this service?

0 Karma
Get Updates on the Splunk Community!

OpenTelemetry for Legacy Apps? Yes, You Can!

This article is a follow-up to my previous article posted on the OpenTelemetry Blog, "Your Critical Legacy App ...

UCC Framework: Discover Developer Toolkit for Building Technology Add-ons

The Next-Gen Toolkit for Splunk Technology Add-on Development The Universal Configuration Console (UCC) ...

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...