Associate entities with an entity type in ITSI

Associate an entity with an entity type to populate dashboards and navigations for that entity in (ITSI). For more information about entity types, see Overview of entity types.

Every entity you configure with a supported entity integration automatically has an entity type according to the entity integration you used. For example, when you configure a Windows integration and select to integrate Windows hosts, each Windows host has the Windows entity type. Find all of the default entity types in $SPLUNK_HOME/etc/apps/SA-ITOA/default/itsi_entity_type.conf. For more information, see itsi_entity_type.conf in the Administration Manual.

You can assign an existing entity type to entities you import from a search or CSV file. A column entry in the import must match an existing entity type. If the column entry doesn't match en existing entity type, the import process ignores the entity type. An entity can be associated with more than one entity type.

To import an entity from a CSV, see Import entities from a CSV file in ITSI. To import an entity from a search, see Import entities from a Splunk search in ITSI.

Prerequisites

Requirement	Description
ITSI roles	You have to log in as a user with the itoa_admin or itoa_team_admin role.

Steps

Follow these steps to associate existing entities with an entity type. You can add an entity type to a single entity or bulk update multiple entities.

1. From the ITSI main menu, go to Configuration > Entity Management.
2. Select each entity you want to add to a particular entity type.
3. Click Bulk Action > Add selected to entity type.
4. Select the existing entity type to associate each entity with and click Add when you're done.