I need to do some Excel analysis on the Episodes in ITSI, breaking them up by various parameters. I might be able to create a SPLUNK dashboard to do this sort of thing, but I think management is going to want it in Excel ultimately.
Making a report off of raw searches is a cake walk, but is there any way to make a report of the EPISODES in ITSI? Basically what I am doing now is literally highlighting and copying the episodes off our ITSI Episode Review and pasting them into excel, getting me all the data from the columns like assignee, time/date, etc. I know there is a way to do this more programmatically
Or am I barking up the wrong tree here? Do I need to generate reports for each correlation search instead?