When I am trying to create entities using search in Splunk ITSI, it is throwing the below error and the entity load is failing.  ERROR: KeyError at "/opt/splunk/etc/apps/SA-ITOA/lib/itsi/csv_import/itoa_bulk_import_entity.py", line 172 : 'abcde servers : os' abcde servers : os  --> this happens to be the old title of an existing service. The Service was initially named as "abcde servers : os ". Now the service has a different name. I am not sure if this service is somewhat related to the error thrown by ITSI while importing entities.  Can anyone help in fixing this error.   ... View more

Hi,  I am trying to create a service using a service template, so that I can use the same KPIs( in the template) against the set of hosts that is matching my entity rules in my newly created service.  However, when I am trying to view this service from a service analyzer, I see my service in grayed out and NO entities are being populated against the KPIs in my service. But other services ( previously created by someone else) using the same service template is working fine.  Here are the below troubleshooting steps that I checked already - 1. Opened the KPI searches separately in a search window and have searched against my entities separately by adding '| search host= "my entitryname''  ' And it is returning values.    2. Opened some of the matched entities in the Entities page. I checked the 'Assigned Service(s)' setting from the Edit Entity option.  I can see other ( previously created) by someone else) services are assigned with the entities. But My service is not listed there against the entities.  Though I can see the entities listed from the entity rule option when I open the services.  Please help to solve this.  I am very new to ITSI and trying  to learn ITSI. So please pardon, if this is a very basic question that I am struggling with.  ... View more

I am trying to pull data from an  Oracle DB that has very high volume of data, like hundreds of data per second.  But the input is skipping some records intermittently.  I am pulling data using below configuration : Query Timeout:120 Max Rows to Retrieve : 0 Fetch Size : 10000 Execution Frequency : */10 * * * *   I have tried using two inputs using two different rising column ( one of them is an Unique ID field, another is a time field), but both the inputs are skipping the same records.  However, we are not finding any abnormalities with those records while checking from the DB.    Any idea what may be the cause of the issue or any suggestion on how to triage the issue?        ... View more

I am trying to create a Db connect input for Oracle DB for which the Rising column has TIMESTAMP WITH LOCAL TIMEZONE format.  Sample values from the Rising column field :  2020-10-30 07:32:35.015828 America/New_York I have used the below format for the Datetime Format for the raising column while creating hthe DB Input, but its throwing an error which says : "'Invalid argument(s) in call'" yyyy-MM-dd HH:mm:ssZ What should be the correct Datetime format for this?  ... View more