Splunk ITSI Maintenance Window

Splunk Search

Hello,

I need to enable alert suppression during maintenance window in splunk ITSI. I have correlation searches where it directly referring to the actual data index and not itsi_summary. How to enable maintenance in such scenario?

Thanks,

Vijay

Get Updates on the Splunk Community!

Think Like an Architect: Introducing the Splunk Certified Cybersecurity Defense ...

In cybersecurity, defenders respond to threats. Architects design the systems that stop them. As ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...