Splunk IT Service Intelligence

Splunk IT Service Intelligence (ITSI) : After removing a service, why is it still showing as a dependent child of another service in the service tree?

ernandofs
Explorer

I removed a service, but it is still showing as a dependent child of another service in the service tree. It appears as "Undefined" instead of its original name. How do you clean this out? The service tree is not showing the correct info in this way. The service tiles work fine.

Regards,

Ernando.

ernandofs
Explorer

We didn't clone the service. We created a new service, removed any dependencies for the initial service and dropped it. Rename the new one. (I.E Create a new service SQL-Server_new, dropped SQL-Server, and rename SQL-Server_new to SQL-Server).

PS: The Splunk support asked us to not clone because the issue could be inherited in the new service.

rcao_splunk
Splunk Employee
Splunk Employee

Got it ! thank you so much Ernando:D

0 Karma

ernandofs
Explorer

Yes, we resolved. We opened a ticket with Splunk. The support person instructed us to create a new service same as the original service and before dropping the original service we had to remove any dependencies for that original service. When we finally dropped the original service with the hanging child services, everything went away.,Yes, we did. I opened a ticket with Splunk. The support person instructed us to create a new service same to the original service were the child services were hanging and to remove any dependency with that original service and drop the original services afterward. When I dropped the original service everything went away and I start to use the new service.

rcao_splunk
Splunk Employee
Splunk Employee

thank you for your reply. Not sure I get it. Base on your screenshot, clone a new SQL-Server Service(call it New_SQL-Server) and remove any dependencies for SQL-Server Service, then remove SQL-Server Service, maybe the undefined service has been dropped. At last rename the New_SQL-Server to SQL-Server. Is that right? Thank you.:)

0 Karma

ernandofs
Explorer

Current Application: IT Service Intelligence
App Version
3.1.3
App Build
4536798501

0 Karma

rcao_splunk
Splunk Employee
Splunk Employee

Hi Ernando, have you solved this problem? Thanks!

0 Karma

kanwu_splunk
Splunk Employee
Splunk Employee

What ITSI version is this?

0 Karma

ernandofs
Explorer

Current Application: IT Service Intelligence
App Version
3.1.3
App Build
4536798501

0 Karma

yannK
Splunk Employee
Splunk Employee

Wait a bit for the Service-healthscores to be udpated, then reload with a shorter timerange, does it still appears ?

0 Karma

ernandofs
Explorer

Thanks for your reply.

We have removed the services over a week ago. We restarted the entire Splunk environment including ITSI and the services removed are still showing as children of another service (they were children before). It looks like that only the name of the services were removed but the dependencies hasn't. The services shows as "Undefined".

Attached is a picture showing the issue.

Regards,

Ernando.alt text

0 Karma
Get Updates on the Splunk Community!

BSides Splunk 2022 - The Call for Papers is now Open!

TLDR; Main Site: https://bsidessplunk.com CFP Site: https://bsidessplunk.com/cfp CFP Opens: December 15th, ...

Sending Metrics to Splunk Enterprise With the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...

What's New in Splunk Cloud Platform 9.0.2208?!

Howdy!  We are happy to share the newest updates in Splunk Cloud Platform 9.0.2208! Analysts can benefit ...