itsi_kpi_threshold_template.conf

The following are the spec and example files for itsi_kpi_threshold_template.conf.

itsi_kpi_threshold_template.conf.spec

# This file contains possible settings you can use to upload sample 
# KPI threshold templates to the KV store.
#
# There is an itsi_kpi_threshold_template.conf in $SPLUNK_HOME/etc/apps/SA-ITOA/default. To set custom
# configurations, place an itsi_kpi_threshold_template.conf in $SPLUNK_HOME/etc/apps/SA-ITOA/local.
# You must restart ITSI to enable new configurations.
# 
# To learn more about configuration files (including precedence), see the
# documentation located at
# http://docs.splunk.com/Documentation/ITSI/latest/Configure/ListofITSIconfigurationfiles.

[<kpi_threshold_template>]

* Each stanza represents a KPI threshold template.
* Use threshold templates to build your time policies.
* You can create different policies with different time block
  combinations, such as work hours, off hours, or weekends.

title = <string>
* The title of the KPI threshold template.

description = <string>
* A description of the KPI threshold template.

time_variate_thresholds_specification = <JSON>
* A JSON blob containing the detailed time variant threshold object.

acl = <JSON>
* A JSON blob containing the ACL information for the KPI threshold template.
* Use the following format:
     {
        "perms":{
           "read":[
               <LIST_OF_ROLES>
           ],
           "write":[
               <LIST_OF_ROLES>
           ]
        },
        "can_share_user":[true|false],
        "can_share_app":[true|false],
        "modifiable":[true|false],
        "sharing":["app"|"global"],
        "can_change_perms":[true|false],
        "can_share_global":[true|false],
        "owner": <OWNER_NAME_STRING>,
        "can_write":[true|false]
     }

time_variate_thresholds = [True|False]
* Whether to enable time-variate thresholds.
* Time-variate thresholds accommodate normal variations in usage across
  your services and improve the accuracy of KPI and service health scores.
* For example, a time-variate threshold might take into account higher levels
  of usage during work hours, and lower levels of usage during off-hours
  and weekends.
* Default: True

adaptive_thresholding_training_window = <-7|-14|-30|-60>[d]
* The time window over which historical KPI data is analyzed for
  adaptive threshold updates.
* You must have 7 days of summary data in the summary index for
  adaptive thresholding to work properly.
* Default: -7 days

adaptive_thresholds_is_enabled = [True|False]
* Whether to enable adaptive thresholding for policies in time-variate thresholds.
* Adaptive thresholding lets you create time polices that generate thresholds
  dynamically and update daily based on changes in your data.
* If you set this value to "true", the 'time_variate_thresholds' setting must
  also be set to "true".
* Default: False

itsi_kpi_threshold_template.conf.example

No example