These scenarios provide an overview about how ITSI helps accomplish business goals, such as monitoring service degradation or grouping related alerts to reduce noise.In the context of modern ITSI tools, the AIOps term plays an important role: AIOps platforms enable the extraction and analysis of large amounts of data from different IT environments and devices through Machine Learning and Big Data. Two new ITSI scenarios are published with this release. What's new in the docs New feature or enhancement For more information, see Configure Splunk Enterprise for IPv6. ITSI version 4.17.0 is Internet Protocol version 6 (IPv6) compatible. Internet Protocol version 6 compatibility You also need to complete the workaround steps from ITSI-26097 in Known issues in Splunk IT Service Intelligence to enable ITSI support for federated search. In order to configure transparent mode, see About standard and transparent mode. For more information, see Add an episode dashboard.Īs of version 4.16.0, ITSI supports the Splunk Federated search transparent mode option. You can now add a custom Dashboard Studio or Simple XML formatted dashboard to display in each episode grouped by an aggregation policy. The sparkline on the ITSI Service Analyzer has been enhanced to display interpolated, more accurate values and minimize load times.Įvent Analytics New feature or enhancement For more information, see Detect and remove outliers in adaptive thresholds. You can toggle the Enable outlier exclusion button for KPIs configured with adaptive thresholding in order to identify and exclude historical data outliers from adaptive thresholding calculations, ensuring more accurate KPI threshold values and service health scores. Outlier exclusion for adaptive thresholds Service Insights New feature or enhancement For more information, see Run a search command to clean up obsolete searches. Use the cleanupentitydiscoverysearches command to find and remove searches that are no longer discovering data for your entities. For more information, see Understand entity status and search data in ITSI. You can now use this page to troubleshoot issues with discovery searches, better understand why entities display an inactive or unstable status, and view remediation steps. The Entity Discovery Searches page allows you to gain visibility into the searches that discover your entities and contribute to the entity status calculation. Infrastructure Overview New feature or enhancementĮntity status remediation and root-cause analysis ![]() ![]() You must incorporate the lookup command into your own SPL queries to obtain the service_name field. Lookup service_kpi_lookup _key AS serviceid OUTPUT title AS service_nameīy executing this SPL command, you can retrieve the service_name from the service_kpi_lookup file. To obtain the service_name for a given serviceid, use the following SPL (Search Processing Language) lookup command: If you rely on the service_name field, this change affects you. This change to service name field mapping protocol in Service and Episode Monitoring Correlation Searches improves data reliability by eliminating the previous requirement for refreshing automatic lookup periodically to ensure that the service_name field populated for all records in the itsi_summary index. Mapping for the service_name field in the itsi_summary index is now driven by SPL command rather than by automatic lookup from the content pack for ITSI Monitoring and AlertingĪutomatic lookup responsible for returning the service_name field for the itsi_summary index is removed when users upgrade to Splunk App for Content Packs 2.0.0. If you're upgrading from a previous version of the Splunk App for Content Packs, be sure to go through the important steps mentioned in Upgrade Splunk App for Content Packs to version 2.0. Saved searches are deactivated by default on upgrade and install of Splunk App for Content Packs 2.0 to avoid negative impact on ITSI performance and to provide more control for users to enable saved searches only for in-use content packs To activate the saved searches, refer to the Install and Configure documentation of the required content pack. ![]() This version has these new and changed features.ĭata Integrations New feature or enhancementĭeactivated the saved searches of all content packs New features in Splunk IT Service Intelligence
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |