Hi,
I am having ITSI 4_1_1.
and have ConfiguremultipleITSIdeploymentstousethesameindexinglayer.
https://docs.splunk.com/Documentation/ITSI/4.1.1/Configure/DeploymentPlanning
I...
...ive. ConfiguremultipleITSIdeploymentstousethesameindexinglayer - Splunk Documentation Noticed that this search is not returning those 2 important fields alert_color and alert_value. s...