Splunk ITSI

repeatative of splunk web messages after deleting

DataOrg
Builder

I am using ITSI enterprise and i am getting web messages after deleting also.
the messages is also not current messages which is older messages.

0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

@premranjithj,

You are getting "Duplicate entity aliases found" message, which means some entities has same alias. It is showing messages with old timestamp as this message generated when ITSI first time found entity alias which has already available in same Service. But those entities is still exist and same issue is available so it is showing messages with old timestamp.

Hope this helps!!

DataOrg
Builder

i have deleted the entities which causing this alert but it getting created on the next day. i have not restore it

0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

Can you tell what messages are those?

0 Karma

DataOrg
Builder

1.Duplicate entity aliases found. This may cause incorrect statistical aggregation results for KPI base searches. Show duplicates.
2.Duplicate entity aliases found. This may cause incorrect statistical aggregation results for KPI base searches. Show duplicates.
3.Duplicate entity aliases found. This may cause incorrect statistical aggregation results for KPI base searches. Show duplicates.
4.Duplicate entity aliases found. This may cause incorrect statistical aggregation results for KPI base searches. Show duplicates.

with older dates and time
every day messages count increasing

0 Karma

DavidHourani
Super Champion

what are the duplicates ? Show duplicates.

0 Karma
Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...