I understand your suggestion of using search to extract data from the index without configuring it through KPIs, and I have given it some thought. However, I would also like to display the health color of the Service on GT, which can only be calculated by ITSI and requires the KPIs to be configured there. So it seems that accepting the delay on GT may be the only way to achieve this.
... View more
I know the KPI Search Schedule can only select items as mentioned in the picture. But in case I want the information to be displayed faster by set the Search Schedule KPI to less than 1 minute, is there a way to do this? Or if not, what is the best way to display information on Glass Table in the fastest way? Because the information on the Glass Table has to wait for the KPI Search Schedule to complete their task while the raw data has been uploaded to Splunk before. This causes the Glass Table information to appear slower than the actual data (about 3 minutes according to my observations). Thank you very much if anyone can help.
... View more