Fixed issues in Splunk IT Service Intelligence

This version of IT Service Intelligence was released on January 23, 2024 and includes fixes for the following issues. Issues are listed in all relevant sections, so some issues might appear more than once.

Adaptive Thresholding

Date resolved	Issue number	Description
2023-11-06	ITSI-30991	Outlier detection returns error StatisticsError: variance requires at least two data points for time series with valid data points
2023-08-28	ITSI-30577	Values from threshold templates don't appear in Service Definition

Backup/Restore and Migration Issues

Date resolved	Issue number	Description
2023-10-19	ITSI-32459	Cleanup the migration_helper folder before the restore of the backup starts
2023-05-29	ITSI-29586	Unable to restore default scheduled backup

Deep Dive

Date resolved	Issue number	Description
2023-12-21	ITSI-33470	Filter for Deep dives and Glass tables lister not working as expected with equal sign
2023-08-24	ITSI-31471	ITSI timepicker modifies the timerange for users that are using non default timezone
2023-08-17	ITSI-31640	Deep Dive overlay values are overlayed with the unit making it hard to read

Entities

Date resolved	Issue number	Description
2023-09-26	ITSI-31855, ITSI-33386	API entity_discovery_searches Failed to return discovery searches post upgrade
2023-09-11	ITSI-31723	Error modal appears when user attempts to filter entities with a parenthesis in the name on entity management page
2023-05-29	ITSI-29586	Unable to restore default scheduled backup

Notable Events

Date resolved	Issue number	Description
2023-12-07	ITSI-33166	Rules Engine process gets enabled after Splunk restart even if it is disabled
2023-12-07	ITSI-30099	When multiple actions are triggered, field does not get updated according to the last action rule
2023-08-21	ITSI-31559	The Preview Mode is not showing results when smart mode is turned on
2023-07-17	ITSI-31192	All Events tab does not render default columns if they are not present in NEAP JSON definition
2023-07-17	ITSI-30500	NEAP filtering criteria with value *(wildcard) does not satisfy the events which contain \n(line break) in the value
2023-05-27	ITSI-27028	When Identifier Fields are specified for Notables and Smart Mode is enabled, the Episodes do not show the identifier fields

Notable Event Aggregation Policies

Date resolved	Issue number	Description
2023-12-07	ITSI-33166	Rules Engine process gets enabled after Splunk restart even if it is disabled
2023-12-07	ITSI-30099	When multiple actions are triggered, field does not get updated according to the last action rule
2023-08-21	ITSI-31559	The Preview Mode is not showing results when smart mode is turned on
2023-07-17	ITSI-31192	All Events tab does not render default columns if they are not present in NEAP JSON definition
2023-07-17	ITSI-30500	NEAP filtering criteria with value *(wildcard) does not satisfy the events which contain \n(line break) in the value
2023-05-27	ITSI-27028	When Identifier Fields are specified for Notables and Smart Mode is enabled, the Episodes do not show the identifier fields

Glass Table

Date resolved	Issue number	Description
2023-12-21	ITSI-33470	Filter for Deep dives and Glass tables lister not working as expected with equal sign
2023-10-05	ITSI-27888	Move Forward/Backward is not working when initially add visualization to a black canvas

KPI Base Searches

Date resolved	Issue number	Description
2023-07-24	ITSI-31085	KPI Backfill searches run under 'Search' app context instead of ITSI/SA-ITOA app context
2023-06-08	ITSI-28869	Adhoc searches should not be validated while creating KPI base with metrics search option

KPI Search Calculation

Date resolved	Issue number	Description
2023-10-30	ITSI-32031	itsi_at_search_kpi_minus7d Missing field alert_value at time
2023-07-24	ITSI-31085	KPI Backfill searches run under 'Search' app context instead of ITSI/SA-ITOA app context
2023-06-12	ITSI-30550	Show search/parser errors in UI for KPI creation model
2023-04-04	ITSI-28886	mod_time and retirable appear as a metric_name in itsi_summary_metrics and unnecessarily creates extra datapoints

Maintenance Window

Date resolved	Issue number	Description
2023-10-31	ITSI-32628	Maintenance Window duration drop down is not updating End time value upon changing duration
2023-08-16	ITSI-31233	Changing the input time field in the maintenance window is not working as expected
2023-07-25	ITSI-31345	Since upgrade ITSI to 4.17.0, filtering service at maintenance windows does not work.
2023-07-10	ITSI-31195	maintenance window time setting issues

Service Analyzer

Date resolved	Issue number	Description
2023-10-18	ITSI-31870	Sawtooth pattern for 15 min KPIs
2023-10-16	ITSI-32214	Service analyzer link for service does not show up
2023-08-24	ITSI-31471	ITSI timepicker modifies the timerange for users that are using non default timezone
2023-07-10	ITSI-31097	In SA page filter service dropdown scroll is going in infinite loop
2023-05-30	ITSI-30080	Newly added entities in environment do not get linked to the services and their respective KPIs in ITSI v4.17.0

Service Definition

Date resolved	Issue number	Description
2023-11-27	ITSI-33142	ITSI UI Bug - Service Template config page has button area above where button is displayed
2023-09-13	ITSI-31654	Should populate a list entities when you are trying to match entities in service definition
2023-08-14	ITSI-31692	KPI cloning is not working when user select KPIs from more then one service.
2023-08-03	ITSI-31556	Entity detail is missing data when viewing from Service Definition view
2023-06-26	ITSI-30330	Improve performance of matched entities in entity rules tab
2023-06-09	ITSI-30378	Time policy auto-shifts by one hour upon user addition

Service Health Score

Date resolved	Issue number	Description
2023-08-02	ITSI-31329	Health score calculation - Importance level is not being saved

Service Templates

Date resolved	Issue number	Description
2023-08-30	ITSI-31867	Entity rule fields are no longer in view only mode for the OOTB service templates

Predictive Analytics

Date resolved	Issue number	Description
2023-08-24	ITSI-31471	ITSI timepicker modifies the timerange for users that are using non default timezone

Uncategorized issues

Date resolved	Issue number	Description
2024-01-18	ITSI-33443	The error message "Entities are unstable in IT Essential works app of Preprod (pp-ritsl)" appears even after updating to the latest version.
2024-01-04	ITSI-31688	Episode Review share filtering url should contain the information for the episode view on/off
2024-01-03	ITSI-33583	Episode review timeline should be updated when the policy filter is applied
2023-12-18	ITSI-33134	When the episode from 2nd page is selected and the table refreshed The focus from the episode is getting lost
2023-12-13	ITSI-31708	KPI backfilling is not working properly for services linked with more number of entities
2023-12-12	ITSI-33286	The status value get reset to In progress if the episode in acknowledged
2023-12-11	ITSI-33113	Bulk Acknowledge Episode can be executed for already Acknowledged episode by another user
2023-12-08	ITSI-32657	Events not being indexed into itsi_tracked_alerts if SSL in not enabled
2023-12-06	ITSI-33057	The loadjob search is failing when adding "Event Fields" filter on episode review page
2023-11-28	ITSI-33041	itoa_user role cannot see all dashboards in dropdown in Windows Entity detail page
2023-11-28	ITSI-32180, ITSI-33045	Installation Completed Modal for content packs does not display any warning/error message when no objects are installed
2023-11-27	ITSI-32660	Authored content packs does not preserve importance of ServiceHealthScore of dependent KPI
2023-11-27	ITSI-33045, ITSI-32180	For Authored Content Pack, Lock symbols on the KPIs are not visible even if service template is linked with the Service
2023-11-24	ITSI-32621	Notable drildown search not working on Episode view with sourcetype and colon
2023-11-14	ITSI-32474, ITSI-34680	Adding Ticketing filter after editing columns in Episode Review and saving does not respect the saved state
2023-10-31	ITSI-28713	Removed AWS configurations from props.conf file
2023-10-30	ITSI-32375, ITSI-30097	Alert Breakdown chart on entity type health page should shows other count
2023-10-26	ITSI-31706	Drill down is not working as expected in XML dashboard
2023-10-16	ITSI-32409	Policy filter does not showed up in the Episode Review eventhough user has access to policy details view
2023-10-11	ITSI-32093, ITSI-31750	In ITSI 4.17, when a user has no quota left to run a concurrent search to populate, the search now fails instead of queuing. This leads to errors in the Service Analyzer.
2023-10-02	ITSI-26219, ITSI-26290	Support of splunk.choropleth.svg is missing in ITSI partial backup, Content authorship and itsimodels
2023-10-02	ITSI-30097, ITSI-32375	Status chart on entity type health page should display all the appropriate statuses
2023-09-28	ITSI-31759	Special character in entity_status_tracking field will crash entity search page
2023-09-24	ITSI-31981	Unnamed deep dives are showing up in content pack authorship
2023-09-14	ITSI-30231, ITSI-30289	change entity lookup field to old format
2023-09-12	ITSI-31978	Correlation search edit page malfunctions when time range set to "All Time"
2023-09-05	ITSI-31763	Closing events not excluded in periodic backfill search
2023-09-05	ITSI-31748	Unable to edit cron expression field for the ELM policy
2023-07-31	ITSI-30095	Change all non-macro based OOTB references to ITSI indexes to use macros
2023-07-25	ITSI-27835, ITSI-27834	When you select a service template for a draft content pack, the service template's dependent services aren't automatically selected.
2023-07-24	ITSI-31339	Service templates has references of services that are not selected in the custom Content Pack
2023-07-23	ITSI-27834, ITSI-27835	The Splunk Enterprise Objects filter for Owner does not have the option of "nobody" during custom content pack creation
2023-07-03	ITSI-30068	Event Analytics Monitoring Rules Engine Information panel uses an All time search
2023-06-22	ITSI-30946	Upgrade to ITSI 4.17.0 fails when the management port is changed from the default value of 8089
2023-06-09	ITSI-30342	Restoring recurring and currently applicable custom threshold window is not getting activated
2023-05-30	ITSI-29608	itsi_bidirectional_ticking macro should use macros for index and source types being used within the search
2023-05-30	ITSI-29609, ITSI-30886	itsi_bmc_bidirectional_ticking macro should use macros for index and source types being used within the search