Entity Analytics dashboard in ITSI
The Entity Analytics dashboard helps you analyze metrics and logs for specific entities in IT Service Intelligence (ITSI). You can populate the dashboard with metrics and logs according to analysis data filters ITSI associates with a given entity. Drill down into events associated with the entity to view each one as a time-series chart. The dashboard gives you an entity-level overview of the performance of your services. The following image shows an example Analytics dashboard for an entity:
For more information about how ITSI visualizes entity data, see Overview of entity types in ITSI in the Entity Integrations Manual. To manage the data sources you can view for an entity type in the Entity Analytics Dashboard, see Configure entity types in ITSI in the Entity Integrations Manual.
Entity Analytics dashboards and alerting
The Entity Analytics dashboard in ITSI is powered by the Splunk Enterprise Analytics Workspace, which provides a user interface that enables you to monitor and analyze metrics and other time series without using SPL. While the Entity Analytics dashboard in ITSI doesn't contain alerting functionality, you can set up alerts for KPIs so you receive a notification when a KPI reaches a certain threshold. For instructions, see Receive alerts when KPI severity changes in ITSI in the Administration Manual.
For more information about using the Splunk Analytics Workspace, see About the Analytics Workspace in the Splunk Enterprise Analytics Workspace manual.
View the Analytics dashboard for an entity
Follow these steps to access the Analytics dashboard.
- From the ITSI main menu, click Configuration > Entities.
- Find the entity you want to analyze. Use the basic or advanced filter to narrow down your search, if needed. When you find the entity you want to analyze, click View Health under the Health Column of the entities lister page.
- Select the Analytics tab for the entity.
Event Data Search dashboard in ITSI
About Unix and Linux entity integration in ITSI
This documentation applies to the following versions of Splunk® IT Service Intelligence: 4.7.0, 4.7.1, 4.7.2, 4.7.3, 4.7.4