Add a predictive model to a glass table in ITSI
You can add predictive models to glass tables as ad hoc search widgets. This lets you actively monitor service health and troubleshoot imminent issues before they impact your services.
Ad hoc searches are not optimized because each widget runs its own individual search. Thus, the loading time for your glass table visualization is proportional to the number of predictive model widgets you add.
- To create a glass table widget from a predictive model, you must have a trained model that is saved into the service definition. For more information, see Train a predictive model in ITSI.
- Make sure you're on the Predictive Analytics tab within the service.
- On the Predictive Analytics tab, select the model under Test a Model.
- Click the magnifying glass in the Predicted Average Case Service Health Score or Predicted Worst Case Service Health Score panel to open the predictions in the Search app.
The search is the same whether you select average or worst case.
- Copy the search string.
- Open your glass table in Edit mode.
- Drag Ad hoc Search from the Services panel onto the canvas.
- In the Configurations panel, paste the search string into the
- In the time range picker, select the end time for your ad hoc search.
- Expand Earliest Time and select the start time for your ad hoc search relative to the end time in the time range picker. This determines the time range over which the ad hoc search applies.
Threshold Field, type
next30m_avg_hsto display the average prediction, or
next30m_min_hsto display the worst-case prediction.
- Enable Thresholds to display thresholds for the ad hoc search widget:
- For Thresholds, click On.
- Click Edit and configure the thresholds for the service health score prediction.
- When finished, click Done.
- (Optional) Add a drilldown to the Predictive Analytics dashboard.
- For Drilldown, click On.
- Click Default, and select Custom URL.
- In a separate ITSI window, navigate to Dashboards > Predictive Analytics.
- Select the service and corresponding model to display the health score prediction.
- Copy the URL and paste it into the
URLfield in the glass table.
- Edit the URL from
auto_load=trueto automatically load all of the dashboard panels.
- Select a viz type for your ad hoc search widget. You cannot use the sparkline or trending value viz types because the prediction is a static value.
- Click Update to update the widget to the new visualization and display your search results over the specified time range.
- Click Save.
For more information, see Configure ad hoc search widgets in the ITSI User Manual.
Create an alert for potential service degradation in ITSI
Retrain a predictive model in ITSI
This documentation applies to the following versions of Splunk® IT Service Intelligence: 4.2.0, 4.2.1, 4.2.2, 4.2.3, 4.3.0, 4.3.1, 4.4.0, 4.4.1, 4.4.2, 4.4.3, 4.4.4