Splunk ITSI

getting actual query behind ITSI entity import searches?

jdeep607
New Member

Hi,

From where can i get actual search query behind ITSI entity import searches?

Labels (2)
0 Karma

eduncan
Splunk Employee
Splunk Employee

If you go into settings > searches> choose app ITSI and search for the word entity.  You will see custom entity imports that you have done that you scheduled as recurring.  You can see the actual search that shows entities in Settings>lookups>itsi>itsi_entities.

 

 

Tags (1)
0 Karma
Get Updates on the Splunk Community!

New Dates, New City: Save the Date for .conf25!

Wake up, babe! New .conf25 dates AND location just dropped!! That's right, this year, .conf25 is taking place ...

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud  In today’s fast-paced digital ...

Observability protocols to know about

Observability protocols define the specifications or formats for collecting, encoding, transporting, and ...