Splunk® IT Service Intelligence

Use Splunk IT Service Intelligence

Download manual as PDF

Splunk IT Service Intelligence version 3.0.x reached its End of Life on October 20, 20119. Please see the migration information.
This documentation does not apply to the most recent version of ITSI. Click here for the latest version.
Download topic as PDF

Visualize IT systems and business processes with glass tables

A glass table is an IT Service Intelligence (ITSI) visualization that enables you to see the inter-relationships and dependencies across your IT and business services. You can use a variety of widgets and icons to display KPI and service health scores in a glass table in order to create a dynamic, real-time picture of service behavior and how that service behavior affects your business.

Glass tables show real-time data generated by KPIs and services.

Note: If the currently logged in user does not have permission to view a widget in a glass table, the widget displays as an empty grey box with a "Permission Denied" message above it. Read and write access to services and KPIs is controlled by service level permissions. For information about service level permissions, see Service level permissions in the Installation and Configuration Manual.

Create a glass table

Create a glass table to visualize and monitor the status of services. You can add metrics, such as KPIs, ad hoc searches, and/or service health scores, which update in real-time against a background that you design.

  1. In the Splunk IT Service Intelligence main menu, click Glass Tables.
    The glass tables viewer opens, showing a list of existing glass tables.
  2. Click Create New Glass Table.
  3. Type a Title and Description.
  4. Set Permissions to Private or Shared in App for your new glass table. If you select Shared in App, all Splunk roles have read and write permission by default. You can change this after the glass table is saved.

    If you select Shared in App, although the ITSI roles assigned permission to the glass table can open the glass table, these roles will only see the services and KPIs on the glass table for which they have read permission if service-level permissions are implemented.

  5. Click Create Glass Table.
  6. If the glass table is shared, you can assign read/write permissions to specific roles by clicking Edit > Edit Permissions under the Actions menu.

Build a glass table visualization

Build a basic glass table using the flexible canvas and editing tools in the glass tables editor.

  1. From the list of glass tables, click the name of the glass table.
  2. Use the editing tools to upload images, draw shapes, add icons, add text, and make connections that reflect the relationship between glass table elements.
  3. In the Services panel on the left side, click any service to view all KPIs contained by that service.

    Only services you have permission to read are listed in the Services panel.

  4. Click and drag one or more KPIs onto the drawing canvas.
    A widget appears on the canvas, displaying the associated search values, which continuously update in real-time.
  5. Add additional KPIs, health scores, and ad hoc searches to build out the dynamic elements of your visualization. By default, KPI and ad hoc searches are represented by single value widgets. Service health scores are represented by sparkline widgets.
  6. Click Save.
    GT edit mode.png

    KPI search values update at regular intervals according to the search schedule that you define when you create the search.

Configure KPI widgets

After you add a KPI widget to your glass table, configure it to optimize performance, add a custom drilldown, and customize the widget appearance for a particular glass table design. You cannot modify KPI searches in the editor.

  1. In the glass table editor, click a KPI widget.
    The Configuration panel opens on the right.
  2. For Use KPI Summary, click Yes.
    This enables KPI summary indexing, which accelerates search speeds. See summary index. KPI summary indexing applies to KPIs only, not service health scores.
  3. For Drilldown, click On, then select a destination or type a URL.
  4. For Viz Type, select an appropriate option to display your KPI search results. Viz types include single-value, gauge, sparkline, and single value delta.
  5. Click Update.
    This updates the KPI configuration. The widget's appearance changes to the new viz type.
    Configure KPI widget.png
  6. Click Save.

If you later delete the KPI or the service that contains the KPI, ITSI converts the KPI widget to an ad hoc search widget with the same searches and data. The label says: "Widget converted to ad hoc search because KPI was not found."

Configure ad hoc search widgets

You can also create a custom widget to display search results based on ad hoc searches. Add a new ad hoc search to any glass table, define a custom search string, and customize the appearance of the search widget using a variety of viz types. Your custom search must include the timechart command, or stats by _time to use thresholding.

  1. In the glass tables editor, click and drag Ad hoc Search from the Services panel onto the canvas.
    A single-value widget appears that displays search results from the default ad hoc search string currently shown in the Search box in the Configurations panel.
  2. In the Configurations panel, for Search Type, click Ad hoc and enter your own custom search string.
  3. In the Time Picker, select the end time for your ad hoc search.
  4. In the Earliest Time menu, select the earliest time for the ad hoc search. This determines the start time for your ad hoc search, relative to the End Date and Time that you set in the time picker, and determines the time range over which your ad hoc search applies.
  5. For Threshold Field, enter the field on which to base thresholding for the ad hoc search. For example, count.
  6. For Thresholds, click Yes to enable the display of thresholds for the ad hoc search widget.
  7. Click Edit. The threshold window opens.
  8. In the threshold window, add thresholds for the ad hoc search. This determines the color of the widget, which indicates the current status of the metric.
  9. Select a Viz Type for your ad hoc search widget.
  10. Click Update.
    The glass table widget updates to the new Viz Type and displays your ad hoc search results over the specified time range.
    Ad hoc search earliest.png
  11. Click Save.
Create an aggregation policy
Use one glass table to monitor KPI values across multiple services in ITSI

This documentation applies to the following versions of Splunk® IT Service Intelligence: 3.0.0, 3.0.1, 3.0.2

Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters