Splunk® IT Essentials Work

Administration Manual

Splunk IT Essentials Work version 4.9.0 isn't available for download.
This documentation does not apply to the most recent version of Splunk® IT Essentials Work. For documentation on the most recent version, go to the latest release.

Use the Service Statistics Dashboard

The ITSI SVC Statistics dashboard enables you to view the total Splunk Virtual Core (SVC) usage for . An SVC is a unit of capabilities in Splunk Cloud Platform that includes compute, memory, and I/O resources. To learn more about SVCs, see Monitor current SVC usage of your workload-based subscription in the Splunk Cloud Platform Admin manual.

The dashboard can be used as a reference to view the SVC breakdown for your ITE Work instance by service tags. Clone and configure this dashboard to generate other breakdowns based on your organization's specific requirements.

Dashboard panels

Panel Description
ITSI SVC Entitlement Displays the number of SVCs assigned to your subscription per your license entitlement that are specific to ITSI. To display the ITSI SVC entitlement, duplicate the dashboard and edit the following search string in Source mode:

itsi_svc_entitled=svc_total_entitled*0.8

Replace svc_total_entitled*0.8 with the total SVC entitlement displayed in the Workload dashboard on the Splunk Cloud Platform Monitoring Console. To learn more about the Workload dashboard, see the Workload dashboard.

ITSI SVC Usage In Last 7 Days The ITSI SVC is calculated as a portion of the total SVC entitlements. The percentage is calculated by dividing the number of scheduled ITSI searches by the total number of searches.

The diagram below shows a visual representation of the breakdown calculation: ITSISVC.png.

ITSI SVC Usage Breakdown by Service Tags In Last 24 Hours Displays a breakdown of SVC usage in the last 24 hours based on service tags. The breakdown is calculated by dividing the number of searches for a KPI by relevant service tags. Each KPI base search is linked to one or more services. For KPIs that share a service, the searches are divided by all tags on associated services. The GLOBAL service tag represents KPI searches that are not tagged. For more information about service tags, see Add tags to a service in ITSI.

The diagram below shows a visual representation of the breakdown calculation: A flow diagram that displays several magnifying glasses that represent searches. A line points to an icon that represents a KPI, and another line points to a widget icon that represents a service. Finally, another line points to service tags.

ITSI Search Breakdown By Service Tags In Last 7 Days Displays a breakdown of the number of ITSI searches in the last 7 days based on service tags. The breakdown is calculated by dividing the number of searches for a KPI by relevant service tags. Each KPI base search is linked to one or more services. For KPIs that share a service, the searches are divided by all tags on associated services.
ITSI SVC Breakdown By Service Tags In Last 7 Days

Displays a breakdown of SVC counts in the last 7 days based on service tags. The breakdown is calculated by dividing the number of searches for a KPI by relevant service tags.

Last modified on 19 December, 2023
Use the Health Check dashboard   About configuration files in ITE Work

This documentation applies to the following versions of Splunk® IT Essentials Work: 4.9.0, 4.9.1, 4.9.2, 4.9.3, 4.9.4, 4.9.5, 4.9.6, 4.10.0 Cloud only, 4.10.1 Cloud only, 4.10.2 Cloud only, 4.10.3 Cloud only, 4.10.4 Cloud only, 4.11.0, 4.11.1, 4.11.2, 4.11.3, 4.11.4, 4.11.6, 4.12.0 Cloud only, 4.12.2 Cloud only, 4.13.0, 4.13.1, 4.13.2, 4.13.3, 4.14.0 Cloud only, 4.14.1 Cloud only, 4.14.2 Cloud only, 4.15.0, 4.15.1, 4.15.2, 4.15.3


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters