Splunk® IT Service Intelligence

Entity Integrations Manual

Associate entities with an entity type in ITSI

Associate an entity with an entity type to populate dashboards and navigations for that entity in (ITSI). For more information about entity types, see Overview of entity types.

Every entity you configure with a supported entity integration automatically has an entity type according to the entity integration you used. For example, when you configure a Windows integration and select to integrate Windows hosts, each Windows host has the Windows entity type. Find all of the default entity types in $SPLUNK_HOME/etc/apps/SA-ITOA/default/itsi_entity_type.conf. For more information, see itsi_entity_type.conf in the Administration Manual.

You can assign an existing entity type to entities you import from a search or CSV file. A column entry in the import must match an existing entity type. If the column entry doesn't match en existing entity type, the import process ignores the entity type. An entity can be associated with more than one entity type.

To import an entity from a CSV, see Import entities from a CSV file in ITSI. To import an entity from a search, see Import entities from a Splunk search in ITSI.


Requirement Description
ITSI roles You have to log in as a user with the itoa_admin or itoa_team_admin role.


Follow these steps to associate existing entities with an entity type. You can add an entity type to a single entity or bulk update multiple entities.

  1. From the ITSI main menu, go to Configuration > Entity Management.
  2. Select each entity you want to add to a particular entity type.
  3. Click Bulk Action > Add selected to entity type.
  4. Select the existing entity type to associate each entity with and click Add when you're done.
Last modified on 28 April, 2023
Create custom entity types in ITSI   About the Entity Overview in ITSI

This documentation applies to the following versions of Splunk® IT Service Intelligence: 4.11.0, 4.11.1, 4.11.2, 4.11.3, 4.11.4, 4.11.5, 4.11.6, 4.12.0 Cloud only, 4.12.1 Cloud only, 4.12.2 Cloud only, 4.13.0, 4.13.1, 4.13.2, 4.13.3, 4.14.0 Cloud only, 4.14.1 Cloud only, 4.14.2 Cloud only, 4.15.0, 4.15.1, 4.15.2, 4.15.3, 4.16.0 Cloud only, 4.17.0, 4.17.1, 4.18.0, 4.18.1, 4.19.0

Was this topic useful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters