About administering Splunk ITE Work

(ITE Work) is a free app based on Splunk IT Service Intelligence (ITSI) that helps you start monitoring and analyzing your IT infrastructure.

ITE Work includes data integrations and investigation tools for operating systems, virtual infrastructures, and containers. You can use ITE Work to automatically discover and bring in data in the form of entities. An entity represents an IT component that requires management to deliver an IT service. Entities are usually hosts, but can also be items such as cloud or virtual resources, network devices, or applications. Related dashboards are also created as part of the entity integrations. These dashboards give you insight into the health and performance of your entities.

ITE Work is available both for Splunk Cloud Platform customers and Splunk Enterprise customers. It enables you to do the following:

Task	Tool
Automatically discover and create entities from onboarded data for known entity types.	Entity integrations These default entity integrations are available in ITE Work: Unix and Linux Windows VMware vSphere Splunk Infrastructure Monitoring
Import additional entities into ITE Work.	Entity discovery searches
Classify data sources and create statistical calculations to measure the health of the data source.	Entity types and vital metrics
Get a holistic view of all entities in your environment, as well as the health of those entities across various platforms.	Infrastructure Overview dashboard
Investigate alerts caused by changes in the vital metrics for entity types in your environment.	Alert Review dashboard
Install prepackaged content to quickly set up your ITE Work environment and start using the data you've brought in.	Splunk App for Content Packs and Splunk Content Packs for ITSI and ITE Work

Administering ITE Work is a less involved proposition than administering ITSI, because ITE Work only supports the following subset of the ITSI functionality:

Name	Description
Overview of backing up ITE Work KV store data	Regularly back up the KV store and restore your ITE Work data from a backup in the event of a disaster or if you add a search head to a cluster. You can perform both full backups and partial backups of your data.

Admins are also responsible for ingesting and analyzing entities, creating services and KPIs, and setting up alerts. These tasks are covered in the following manuals:

• For information about importing entities and setting up entity integrations, see the Entity Integrations Manual.
• For information about setting up services and defining KPIs, see the Service Insights Manual.
• For information about aggregating notable events and setting up alert actions, see the Event Analytics Manual.