Splunk® IT Essentials Work

Entity Integrations Manual

This documentation does not apply to the most recent version of Splunk® IT Essentials Work. For documentation on the most recent version, go to the latest release.

Associate entities with an entity type in ITE Work

Associate an entity with an entity type to populate dashboards and navigations for that entity in (ITE Work). For more information about entity types, see Overview of entity types.

Every entity you configure with a supported entity integration automatically has an entity type according to the entity integration you used. For example, when you configure a Windows integration and select to integrate Windows hosts, each Windows host has the Windows entity type. Find all of the default entity types in $SPLUNK_HOME/etc/apps/SA-ITOA/default/itsi_entity_type.conf. For more information, see itsi_entity_type.conf in the Administration Manual.

You can assign an existing entity type to entities you import from a search or CSV file. A column entry in the import must match an existing entity type. If the column entry doesn't match en existing entity type, the import process ignores the entity type. An entity can be associated with more than one entity type.

To import an entity from a CSV, see Import entities from a CSV file in ITE Work. To import an entity from a search, see Import entities from a Splunk search in ITE Work.

Prerequisites

Requirement Description
ITE Work roles You have to log in as a user with the itoa_admin or itoa_team_admin role.

Steps

Follow these steps to associate existing entities with an entity type. You can add an entity type to a single entity or bulk update multiple entities.

  1. From the ITE Work main menu, go to Configuration > Entity Management.
  2. Select each entity you want to add to a particular entity type.
  3. Click Bulk Action > Add selected to entity type.
  4. Select the existing entity type to associate each entity with and click Add when you're done.
Last modified on 28 April, 2023
Create custom entity types in ITE Work   About the Infrastructure Overview in ITE Work

This documentation applies to the following versions of Splunk® IT Essentials Work: 4.9.0, 4.9.1, 4.9.2, 4.9.3, 4.9.4, 4.9.5, 4.9.6, 4.10.0 Cloud only, 4.10.1 Cloud only, 4.10.2 Cloud only, 4.10.3 Cloud only, 4.10.4 Cloud only, 4.11.0, 4.11.1, 4.11.2, 4.11.3, 4.11.4, 4.11.6, 4.12.0 Cloud only, 4.12.2 Cloud only, 4.13.0, 4.13.1, 4.13.2, 4.13.3, 4.14.0 Cloud only, 4.14.1 Cloud only, 4.14.2 Cloud only, 4.15.0, 4.15.1, 4.15.2, 4.15.3


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters