Create groups of assets in Splunk IAI

In Splunk Industrial Asset Intelligence (IAI), an asset group is a set of assets that share many or all properties.

Create a group of assets to achieve these goals:

• Analyze metrics or alarms that are shared by a group of related assets.
• Create a monitor view with an asset selector, which allows you to use a single view to monitor the health of all assets in the group.
• Create calculated metrics for multiple assets at once.

Create a group

Splunk IAI administrators can create a group of assets in two ways:

• Create a group from the Groups tab.
• Create a group from an asset.

Create a group from the Groups tab

To create a group from the Groups tab:

1. In Splunk IAI, select the Browse view.
2. Click the Groups tab.
3. Click + Group.
4. Type a Name for your group.
5. Click Add. Splunk IAI lists your new group on the Groups tab.
6. Click Add Assets.
7. In the Add Assets dialog, filter or navigate to the assets that you want to add to the group.
8. Select the check boxes to add assets.
9. Click Add.

Create a group from an asset

To create a group from an asset:

1. In Splunk IAI, select the Browse view.
2. Click the Assets tab.
3. Browse through an asset hierarchy until you reach an asset that you want to put in a group. You can only view 1000 assets for a particular node in the hierarchy.
4. Select that asset, then click + Add to Group.
5. Type a name for the group. Splunk IAI creates the group and adds this asset to it.
6. To add additional assets to the group, click the Groups tab.
7. Click the name of your group.
8. Click Add next to the count of group members.
9. In the Add Assets dialog, filter or navigate to the assets that you want to add to the group.
10. Select the check boxes to add assets.
11. Click Add.

Manage groups

Splunk IAI administrators can manage all groups in all operations and perform the following functions:

• Add assets to a group
• Remove assets from a group
• Create calculated metrics for groups
• Create monitor views for groups

You can only view 500 groups in Splunk IAI.

Add assets to a group

To add assets as members of a group:

1. In Splunk IAI, select the Browse view.
2. Click the Groups tab.
3. Click the name of your group.
4. Click Add next to the count of group members.
5. In the Add Assets dialog, filter or navigate to the assets that you want to add to the group. You can only view 1000 assets for a particular node in the hierarchy.
6. Select the check boxes to add assets.
7. Click Add.

If you add an asset to a group that has calculated metrics at the group level, make sure that the metrics associated with the asset have unique names that do not match the calculated metrics for the group. If metrics have the same name, rename one of the metrics to be unique. See Edit the name of a calculated metric in this manual.

Remove assets from a group

You can remove assets from a group at any time.

If you remove an asset from a group, the following consequences can result:

• If any metrics exist for the group, or alerts on those group metrics exist, those metrics and alerts no longer apply to this asset. If you later add this asset back to this group, the group calculated metrics and alerts automatically apply to this asset again.
• If calculated metrics exist for this asset that use metrics inherited from the group, they might not function as expected.
  • If the group calculated metric is based on metrics selected from the Assets or Other tab, the calculated metric continues to work.
  • If the group calculated metric is based on metrics selected from the Group tab, the calculated metric fails.

To remove group members:

1. In Splunk IAI, select the Browse view.
2. Click the Groups tab.
3. Click the name of your group.
4. Click Remove next to the name of the asset you want to remove from this group.
5. Select the check boxes to confirm that you understand the consequences of removing the asset from the group.

Create calculated metrics for groups

As an IAI administrator, you can create custom calculated metrics for assets or groups of assets. All assets in the group inherit the calculated metric created for the group, allowing you to construct a formula once and automatically apply it to all assets in the group. Calculated metrics for individual assets are available only on the asset for which they were created.

To create a calculated metric for a group:

1. In Splunk IAI, select the Browse view.
2. Click the Groups tab.
3. Click the name of the group.
4. Click the Group Metrics tab.
5. Click Add.
6. Type a Name and an optional Description for the metric.
7. Click Add.

Splunk IAI opens a formula builder that you can use to create your calculated metric. See Calculate metrics in Splunk IAI to continue creating the calculated metric for the group.

Create monitor views for groups

As an IAI administrator, you can create monitor views for groups.

Monitor views for groups behave differently than monitor views for an operation in the following ways:

• Monitor views for groups include an asset selector, which allows a viewer to toggle between assets in the group to monitor the values for each asset in the group.
• You can only create group monitor views from the Browse page while viewing the group details page.
• You can view group monitor views in two locations: on the group details page and on the Monitor page.

To create a monitor view for a group:

1. In Splunk IAI, select the Browse view.
2. Click the Groups tab.
3. Click the name of the group.
4. Click + Add View.
5. Type a Name and optional Description for your group monitor view.
6. Click Add.

Splunk IAI opens the monitor view editor to create your view. See Create views to monitor metrics in Splunk IAI for more information on creating a monitor view.

Delete a group

As an IAI administrator, you can delete groups that you no longer need.

Deleting a group is irreversible. If this group is in use, you can lose data.

Deleting a group can result in the following consequences:

• If the group has any group monitor views, group metrics, or alerts on those group metrics, deleting the group also deletes these views, metrics, and alerts and removes them from all group members.
• If you created calculated metrics or monitor views that use group metrics from this group, deleting the group causes those metrics or views to fail.
• If any monitor views have a custom drilldown configured to link to a group view created for this group, the custom drilldown will fail.

To delete a group:

1. In Splunk IAI, select the Browse view.
2. Click the Groups tab.
3. Click the name of the group you want to delete.
4. Click Delete.
5. Select the check boxes to confirm that you understand the consequences of deleting the group.
6. Click Delete.