How to correlate events in ITSI ?

[anurag0011]

How to correlate events in ITSI ? New to Splunk ITSI

Example CPU and DB alerts collection based on CI match .

Currently using the sandbox - trail .

[kmorris_splunk · Accepted solution]

Take a look at Correlation searches: http://docs.splunk.com/Documentation/ITSI/3.1.2/User/Createcorrelationsearch

Or Multi-KPI alerts: http://docs.splunk.com/Documentation/ITSI/3.1.2/User/Createmulti-KPIalerts

[anurag0011]

Thank you 🙂