Use Splunk IT Service Intelligence

Use one glass table to monitor KPI values across multiple services in ITSI

If you have multiple services on a glass table that contain the same KPI, you can switch back and forth between those services to monitor the KPI in different contexts. Enable service swapping to switch the context of KPIs between different services that contain the same KPIs. Service swapping lets you use one glass table to monitor KPI values across multiple services.

For example, if you have two services, both of which contain the CPU utilization % KPI, you can use service swapping to switch back and forth between services and monitor CPU utilization for both services in one glass table.

Prerequisite

You must have the itoa_analyst, or be assigned the write_itsi_glass_table capability, to enable service swapping on a glass table.

Enable service swapping

Perform the following steps to configure service swapping on a glass table:

1. In the glass tables editor, click Enable Service Swapping.
2. Select the services you want to use for service swapping. KPI matching is based on the KPI title, so each service must have the same KPI titles for swapping to function properly.
   Note that only services for which you have read permission are listed.
3. Click Enable.
4. Use the Service Swapping dropdown to switch KPI context between the selected services. When you swap services, all shared KPI values update to reflect the KPI values for the selected service.

   All KPIs that are enabled for swapping appear with a dotted bounding box in the glass table view.

If you don't want a particular KPI to be swapped when a service is swapped, select the KPI widget and set Service Swappable to No in the Configurations panel.

If you add a KPI to a glass table, the KPI automatically becomes swappable if that KPI is contained within an enabled service.

To change the services that can be swapped, click the service swapping dropdown and select Edit Service Swapping. If you do not have read permissions for one or more swappable services that were previously defined by another user, you cannot edit the services to swap.