Splunk ITSI

ack button not show in ITSI Episode review after upgrade from 3.0.1

lightech1
Path Finder

Hello Team,

We have upgraded ITSI version from 3.01 to 4.03. We have some alerts in "correlation searches" that when it triggers generates a notable events, now with the new version, this impacts on the "episode review " tab.

But when the operators clic or view some alert, the ack or assign button doesn't appear, let me show a screenshot:

alt text

We have tried to create again the alert, use another browser, different versions of java, etc.

Thanks in advance!

0 Karma

szhou_splunk
Splunk Employee
Splunk Employee

From ITSI 4.0, you can ack an Episode but not for event, you can set Episode View to On to see the list of episode. Episode is a group of events so you don't have to do the operation for every event one by one.
Please see https://docs.splunk.com/Documentation/ITSI/4.1.2/User/OverviewofITSINotableEventsReview for more information.

0 Karma
Get Updates on the Splunk Community!

Earn a $35 Gift Card for Answering our Splunk Admins & App Developer Survey

Survey for Splunk Admins and App Developers is open now! | Earn a $35 gift card!      Hello there,  Splunk ...

Continuing Innovation & New Integrations Unlock Full Stack Observability For Your ...

You’ve probably heard the latest about AppDynamics joining the Splunk Observability portfolio, deepening our ...

Monitoring Amazon Elastic Kubernetes Service (EKS)

As we’ve seen, integrating Kubernetes environments with Splunk Observability Cloud is a quick and easy way to ...