Splunk Search

Monitoring console search

anushka
New Member

For adding two KPIs  in SA topology, KPI queries that taken from Monitoring console are using REST API and are working only on Monitoring console and are not giving results at Search Head or ITSI where they are required. 

The error is - "Restricting the results of the rest operator to local instance because you do not have the dispatch_rest_to_indexers capability". How can this be proceeded with ?

Labels (1)
0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...