Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About abarneb
abarneb
Explorer
Member since:
02-13-2017
06-05-2020
Community Statistics
| Posts | 6 |
| Solutions | 1 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 02-13-2017 |
Activity Feed
- Posted Re: ITSI - capability \"execute-notable_event_action\ on Splunk ITSI. 03-13-2017 12:39 AM
- Posted Re: ITSI - capability \"execute-notable_event_action\ on Splunk ITSI. 03-13-2017 12:38 AM
- Posted ITSI - capability \"execute-notable_event_action\ on Splunk ITSI. 03-10-2017 07:21 AM
- Tagged ITSI - capability \"execute-notable_event_action\ on Splunk ITSI. 03-10-2017 07:21 AM
- Tagged ITSI - capability \"execute-notable_event_action\ on Splunk ITSI. 03-10-2017 07:21 AM
- Posted Re: Splunk ITSI - using different types of entities in service on Splunk ITSI. 02-14-2017 12:54 AM
- Posted Splunk ITSI - using different types of entities in service on Splunk ITSI. 02-13-2017 01:13 AM
- Tagged Splunk ITSI - using different types of entities in service on Splunk ITSI. 02-13-2017 01:13 AM
- Tagged Splunk ITSI - using different types of entities in service on Splunk ITSI. 02-13-2017 01:13 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 |
03-13-2017
12:39 AM
The issue was resolved after having granting the ITSI roles to the admin role.
... View more
03-13-2017
12:38 AM
Turned out that the admin role was lacking the itsi roles. The error disappreared after having granted these roles.
... View more
03-10-2017
07:21 AM
I'm seeing a lot of these errors regarding the capability \"execute-notable_event_action:
2017-03-10T16:08:52,445 ERROR [itsiruleengine-akka.actor.default-dispatcher-8] EventOperations:599 - HTTP 403 -- {"message":"(403, '\"splunk-system-user\" does not have the capability \"execute-notable_event_action\"')"}
/opt/splunk/etc/apps/itsi/default/authorize.conf:
Notable Event actions
read-notable_event_action = enabled
execute-notable_event_action = enabled
If I try to assign a notable event nothing happens, so I suspect that this is related. My user has the ito_admin/analyst/user roles granted.
Many thanks in advance 🙂
... View more
02-14-2017
12:54 AM
Hi and thanks for your feedback 🙂
I would like to use a base search that outputs a count per process and server and then set up KPIs for each process where I use this base search and filter processes and environment (prod, QA, test servers) by the entities in the service. If I split by the host field, I will get all processes running on the host. If I use processes as entities I will get results from multiple servers belonging to different environments. I could get around this if I didn't use base search. I tested creating entitities on process_host and set up a base search with a process_host field and this works. I was thinking that it is good to use a base search in terms of performance. The downside is that I will need to create/maintain these entities. If you have any thoughts on this approach, that would be greatly appreciated 🙂
... View more
02-13-2017
01:13 AM
I am filtering a service using two types of entities; one that gives information about hosts and one that gives information about procesess. I've created a KPI that outputs information about processes running on hosts and want to use the entities in service to filter the results. Does anyone have any examples/documentation on how to do this? Is it possible to specify both host and process in the "Entity Split by field" in the KPI definition? I've tried to add "process,host", but this does not seem to work.
These are the fields generated from the search:
process, subsystem, service, server_role, host
Entity Split by field: process
Data filtered by service entities in field: process
Service matches entities on fields: process, subsystem, service, server_role, host
The columns in the entities are of type alias and match the output of the KPI search.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
