Solved: How to correlate events in ITSI ? - Splunk Community

Splunk Search

How to correlate events in ITSI ? New to Splunk ITSI

Example CPU and DB alerts collection based on CI match .

Currently using the sandbox - trail .

1 Solution

Solution

Take a look at Correlation searches: http://docs.splunk.com/Documentation/ITSI/3.1.2/User/Createcorrelationsearch

Or Multi-KPI alerts: http://docs.splunk.com/Documentation/ITSI/3.1.2/User/Createmulti-KPIalerts

View solution in original post

Solution

Take a look at Correlation searches: http://docs.splunk.com/Documentation/ITSI/3.1.2/User/Createcorrelationsearch

Or Multi-KPI alerts: http://docs.splunk.com/Documentation/ITSI/3.1.2/User/Createmulti-KPIalerts

Thank you 🙂

Get Updates on the Splunk Community!

ATTENTION!! We’re MOVING (not really)

Hey, all! In an effort to keep this Slack workspace secure and also to make our new members' experience easy, ...

Splunk Admins: Build a Smarter Stack with These Must-See .conf25 Sessions

Whether you're running a complex Splunk deployment or just getting your bearings as a new admin, .conf25 ...

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...