Splunk® IT Service Intelligence

Administer Splunk IT Service Intelligence

Download manual as PDF

Download topic as PDF

Add service dependencies in ITSI

After you configure a service, you can add other services as impacting services, or service dependencies. Impacting services have some sort of effect or influence on the primary service. Adding service dependencies can help you detect if one service is having a negative impact on another service, and can be useful in performing root cause analysis.

For example, you might have a web service that has a dependency on a database service. By adding the database service as a dependency, you can monitor the impact that the database service is having on the web service.

When you add a service dependency, you select the specific KPIs from the impacting service that you want ITSI to include in the health score calculation of the primary service.

Avoid creating cyclic service dependencies. A cyclic dependency is a relationship between two or more services which either directly or indirectly depend on each other. Cyclic dependencies can result in infinite loops or other unexpected results. A dotted line between services in the Service Analyzer tree view indicates a cyclic dependency.

  1. Click the Service Dependencies tab in the service definition.
  2. Click Add Dependencies.
  3. Select the service(s) that you want to add as a dependency. You can choose services within the same team as the primary service or from the Global team.
  4. Select the specific impacting KPIs that you want to monitor as part of the primary service's health score.
    ServiceDependencies.png
  5. Click Done.
  6. Click Save to save the dependency into the service definition.
    ITSI adds the selected KPIs to the list of service dependencies, and includes the selected KPIs in the primary service health score calculation.

Set importance values for service dependencies

ITSI lets you adjust the importance value of impacting service KPIs on the Settings tab of the service as described in Set KPI importance values in ITSI. Configure the importance value to give impacting KPIs appropriate weights in health score calculations and to generate health score values that more accurately reflect the impact of the dependency on the primary service.

By default, impacting service health scores have an importance value of 11. Regular KPIs have the same importance value that is set for the KPI in the original service.

When an impacting KPI with an importance value of 11 reaches critical, the health score of the primary service will read Critical with a value of 0, regardless of the status of other KPIs.

Enable or disable a service

A service must be enabled in order for the KPI searches associated with that service to run. You can enable a service when you first create it, or at a later time from the Settings tab of the service definition or the Services lister page.

Disable a service to stop KPI searches at any time. Disabling a service is useful if you are still configuring a service and want to avoid generating inaccurate health scores and false positives. It is also useful for reducing search load for performance purposes.

When you disable a child service, it has no impact on the health of an enabled parent service.

  1. Click Configure > Services.
  2. In the Status column of the service, toggle Enabled or Disabled.

If you disable a service that has KPI backfill enabled, the backfill will continue and those KPIs will have data for the backfill period.

Change the team a service belongs to

You can change the team a service belongs to from the Settings tab in the service definition. In order to move a service from one team to another, you must have write permissions for both teams.

Changing the team a service belongs to might break service dependencies. Check to see if the service has a dependency on another service and note the team that the dependent service belongs to before moving the service to another team.

If a service is dependent on a service in the Global team, the service dependency is not broken. However, if a service is dependent on another service within the same team, and you move one of the services to another team, that dependency breaks. Services in private teams cannot have a dependency on a service in another private team.

To bulk move services to a different team, select the checkboxes on the Services lister page, then click Bulk Action > Edit Team.

PREVIOUS
Add entity rules to a service in ITSI
  NEXT
Backfill service health scores in ITSI

This documentation applies to the following versions of Splunk® IT Service Intelligence: 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.1.0, 4.1.1, 4.1.2, 4.1.5, 4.2.0, 4.2.1, 4.2.2, 4.2.3, 4.3.0, 4.3.1, 4.4.0, 4.4.1


Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters