Splunk ITSI

ack button not show in ITSI Episode review after upgrade from 3.0.1

lightech1
Path Finder

Hello Team,

We have upgraded ITSI version from 3.01 to 4.03. We have some alerts in "correlation searches" that when it triggers generates a notable events, now with the new version, this impacts on the "episode review " tab.

But when the operators clic or view some alert, the ack or assign button doesn't appear, let me show a screenshot:

alt text

We have tried to create again the alert, use another browser, different versions of java, etc.

Thanks in advance!

0 Karma

szhou_splunk
Splunk Employee
Splunk Employee

From ITSI 4.0, you can ack an Episode but not for event, you can set Episode View to On to see the list of episode. Episode is a group of events so you don't have to do the operation for every event one by one.
Please see https://docs.splunk.com/Documentation/ITSI/4.1.2/User/OverviewofITSINotableEventsReview for more information.

0 Karma
Get Updates on the Splunk Community!

AppDynamics is now part of Splunk Ideas

Hello Splunkers, We have exciting news for you! AppDynamics has been added to the Splunk Ideas Portal. Which ...

Advanced Splunk Data Management Strategies

Join us on Wednesday, May 14, 2025, at 11 AM PDT / 2 PM EDT for an exclusive Tech Talk that delves into ...

Uncovering Multi-Account Fraud with Splunk Banking Analytics

Last month, I met with a Senior Fraud Analyst at a nationally recognized bank to discuss their recent success ...