Splunk Search

more in depth info on itsi_summary index

abhijeets
Explorer

Hello Experts, 

 

Is there any document available which can give me more in-depth knowledge about itsi_summary index. 

Labels (1)
0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @abhijeets,

The itsi_summary index is a special-purpose index used by Splunk IT Service Intelligence (ITSI) to store KPI data, service analyzer data, and other ITSI-specific summary information.

Key points about itsi_summary:

    1. Stores calculated KPI results and service health scores
    2. Contains event-based and metric-based KPI data
    3. Used for historical analysis and reporting in ITSI
    4. Data retention follows standard index configuration settings

For detailed documentation:

🌟 Did this answer help you? If so, please consider:

  • Adding kudos to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...