Known issues in Splunk IT Service Intelligence

This version of IT Service Intelligence (ITSI) has the following known issues and workarounds. If no issues appear here, no issues have yet been reported.

Backup/Restore and Migration Issues

Date filed	Issue number	Description
2022-12-08	ITSI-27621	"include conf setting" in ITSI restore overwrites and does not seem to merge conf settings

Service Analyzer

Date filed	Issue number	Description
2023-06-09	ITSI-30822	ITSI degraded-entities-search-manager may have caused indexers cluster to crash Workaround: If Service Analyser is running for more than 1 week's time range and search is going through millions of events try to limit the service analyser time range to less than 1 week to limit the search time range.
2023-06-07	ITSI-30580	When the dbconnect app is installed, non-admin ITSI users cannot access their homepage but are routed to the upgrade page. Workaround: Add the db_connect_read_app_conf capability to the custom user with a non-admin role. Enable this capability in the default authorize.conf file.

Uncategorized issues

Date filed	Issue number	Description
2024-01-23	ITSI-34041	ITSI Episode view triggers a search to populate linked tickets, that is looking back to epoch time=1 second till now
2023-05-10	ITSI-30068	Event Analytics Monitoring Rules Engine Information panel uses an All time search Workaround: Edit the Event Analytics Monitoring Dashboard. Click on the magnifying glass under the Rules Engine Information panel. Change the Time Range to Shared Time Picker (time_token).
2022-12-20	ITSI-27741	When closing episodes in bulk, episodes with different statuses display as closed but aren't actually closed. Workaround: During the bulk update of the episodes from the UI, make sure that all the Episodes selected for the bulk update at a time have same Status.
2022-11-28	ITSI-27815	Invalid token for Auto Generated ITSI Event Management Token in Noah stacks Workaround: # Navigate to Settings → Data inputs → HTTP Event Collector For the input Template:Auto Generated ITSI Event Management Token, click on "Delete". This will delete the duplicate token value and within few seconds it will be replaced by the correct one