Dear All, I need help in integration an Openshift with our Splunk Enterprise I have  integrated Openshift with Splunk using HEC and the connection is successfully paired and when the test message was sent from an Openshift we received on Splunk but we don't receive the logs constantly. We are able to see only test logs and after that there are no logs floating to Splunk. Can someone please guide me here. ... View more

I am very new to ITSI, the operational task is to create a business service in ITSI. I have created a test service and under the created service  I have configured KPI and entities but I cannot see any data in KPI or entity it shows  N/A . Splunk ITSI veri Can someone please provide solution to it.   ... View more

I need to configure a service in Splunk ITSI, while creating a KPI am facing an issue. I gave a search string but when its generating a search I get an error in the result: Error in 'SearchParser': The search specifies a macro 'aggregate_raw_into_entity' that cannot be found. Reasons include: the macro name is misspelled, you do not have "read" permission for the macro, or the macro has not been shared with this application. Click Settings, Advanced search, Search Macros to view macro information.   Is there any way to modify the Generated Search.  ... View more