Known issues in the Splunk App for Content Packs

This version of the app has the following reported known issues. If no issues appear below, no issues have yet been reported.

Date filed	Issue number	Description
2022-10-11	ITSI-26585	Entities status is getting "Unstable" from "Active" when installing SA4CP 1.7.0 with ITEW. Workaround: Go to Settings → Searches, Reports, and Alerts Select App → Content Pack for ITSI Monitoring and Alerting (DA-ITSI-CP-monitoring-alerting) Select Owner → All Click on the saved search named ITSI Import Objects - itsi_entity_name_normalizer Edit the search to | inputlookup itsi_entities | eval entity_name=title Save the saved search.
2022-01-05	ITSI-20984	Content pack installed Base searches hit the 100 character limit. Workaround: .Clone the KPI Base Search affected by this issue. Identify the Services that are consuming the KPI Base Search results by following the steps below: Go to ITSI > Configuration > KPI Base Searches Click on the KPI Base Search affected by this issue. Go to the Dependent KPIs section. Identify the list of KPIs and Services dependent on the KPI Base Searches from the list. Replace the KPI Base Search present in the Service with the Cloned KPI Base Search. After following above steps, KPIs of the Service should be populated.
2022-02-18	ITSI-22172	Service Incident has an entity rule defined based on entity title but does not make use of entity filtering.
2022-02-18	ITSI-22169	All searches should use the itsi-cp-servicenow-indexes macro.
2022-02-18	ITSI-22168	Service Incidents, KPI Incidents New (1h): search does not calculate the number of newly create incidents within the last hour correctly.
2022-02-18	ITSI-22166	Wrong search for entity type SNOW Incident, vital metric Total Incidents (1h).
2022-02-18	ITSI-22165	All searches should use the itsi-cp-servicenow-indexes macro.