Splunk ITSI

ack button not show in ITSI Episode review after upgrade from 3.0.1

lightech1
Path Finder

Hello Team,

We have upgraded ITSI version from 3.01 to 4.03. We have some alerts in "correlation searches" that when it triggers generates a notable events, now with the new version, this impacts on the "episode review " tab.

But when the operators clic or view some alert, the ack or assign button doesn't appear, let me show a screenshot:

alt text

We have tried to create again the alert, use another browser, different versions of java, etc.

Thanks in advance!

0 Karma

szhou_splunk
Splunk Employee
Splunk Employee

From ITSI 4.0, you can ack an Episode but not for event, you can set Episode View to On to see the list of episode. Episode is a group of events so you don't have to do the operation for every event one by one.
Please see https://docs.splunk.com/Documentation/ITSI/4.1.2/User/OverviewofITSINotableEventsReview for more information.

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...