Splunk ITSI

ITSI service health score is none when service configure from a service template.

guo_dc
Explorer

When I configure a service from a service template.

ITSI's service health score is disppear. But KPI result is correct.
After a long time is gone , servce health score of Service Analyzer page is none.

I use base search, find no new service kpi health score generated when there is new service from service template.

index=itsi_summary | table _time serviceid kpiid health_score itsi_kpi_id kpi | sort - _time

Then , I remove the service from service template and restart splunk server. Sevice health score recover.
This case appeared for itsi 4.4.3 . Splunk server is 8.0.3
When itsi version is 4.1.2, it is normal to configure new service from a service template, Sevice health can generate by Scheduling reports name service_health_score.

Labels (1)
0 Karma

guo_dc
Explorer

By many times test to find cause about service health score. When KPI name is include chinese char, ITSI appear abnormal to calculate service health score.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...