Known issues in Splunk IT Service Intelligence

IT Service Intelligence (ITSI) version 4.10.1 has the following known issues and workarounds.

Splunk platform issues that impact ITSI compatibility

Date filed	Issue number	Description
2019-02-14	SPL-155648	ITSI Event Analytics is incompatible with Splunk Enterprise version 7.2.0 - 7.2.3. On versions 7.2.4 - 7.2.10, Event Analytics might duplicate events. To work around this issue, create a limits.conf file on all search heads at $SPLUNK_HOME/etc/apps/SA-ITOA/local/ and add the following stanza: [search] phased_execution_mode = auto If you do not plan on using ITSI's Event Analytics functionality, the above does not apply. See Splunk Enterprise system requirement in the Install and Upgrade Splunk IT Service Intelligence manual.

Bulk Import

Date filed	Issue number	Description
2021-06-09	ITSI-17178	Some ITSI Import Objects saved searches fail to merge entities with the host field and may create duplicate entities. Workaround: # Disable ITSI Import Objects - VMware VM. Copy the ITSI Import Objects - VMware VM saved search, but change the entity_merge_field attribute to host. Enable the updated ITSI Import Objects - VMware VM search.

Notable Events

Date filed	Issue number	Description
2021-09-13	ITSI-18828	Alerts and Episodes unable to search by field key/value
2021-09-07	ITSI-18760	Episode events timeline showing unknown alarm states
2021-01-21	ITSI-13167	On Safari, there is a 10 to 15 second delay when editing a Notable Event Aggregation Policy using the ServiceNow action.

Uncategorized issues

Date filed	Issue number	Description
2021-09-15	ITSI-18876	Multi word entity titles in Entity Rules are broken in 4.10.x upon import....
2021-07-22	ITSI-17901	After installing IT Essentials Work, receive an error of ERROR ExecProcessor - message from ""C:\Program Files\Splunk\bin\Python3.exe"

All ITSI Modules

Publication date	Issue number	Description
2017-03-21	ITOA-7585	When you bulk add services and an error caused by the racing condition occurs, the incorrect message "itsi_module does not exist" is displayed.
2017-03-07	MOD-979	KPIs do not have consistent backfill settings across all modules.
2017-01-17	MOD-452	The Analyze KPI button on the Service Details page is broken.
2017-01-17	MOD-402	The Export to PDF option does not work in the drilldown to a module.
2017-01-17	MOD-296	The extendable tab XML generator REST endpoint is located in DA-ITSI-OS instead of in common components where it can be used by all modules.
2017-01-17	MOD-591	ITSI displays a misleading error message when a KPI template contains a field that cannot be resolved.
2017-01-17	MOD-498	There is no upper limit to the number of characters a KPI title or description can contain. Long strings can negatively affect performance.
2017-01-17	MOD-309	The Gruntfile.js included in ITSI modules uses double quotes instead of single quotes, which does not conform to the standard for all JavaScript files.
2017-04-17	MOD-2002	When you drilldown from the Events tab, an "Invalid earliest_time" error occurs. Workaround: Disable drilldown from the Events tab.
2017-01-17	MOD-439	Some modules do not have descriptions for saved searches.

Application Server Module

Publication date	Issue number	Description
2017-01-27	MOD-492	If you reuse the same panel within a dashboard, the duplicate panel does not display any event data.

Cloud Services Module

There are no known issues for this release.

Database Module

Publication date	Issue number	Description
2017-01-17	MOD-586	When a lookup is not configured for TA-Microsoft-SqlServer, ITSI displays a misleading error message on the server drilldown page.

End User Experience Module

There are no known issues for this release.

Load Balancer Module

Publication date	Issue number	Description
2017-01-27	MOD-492	If you reuse the same panel within a dashboard, the duplicate panel does not display any event data.

Operating System Module

Publication date	Issue number	Description
2017-04-13	MOD-555	The Storage Free Space % base search runs every minute while the Linux df command runs every 5 minutes. This causes data gaps.
2017-04-10	MOD-1964	Windows data for memory free space is collected at different intervals than the Memory Free % KPI.
2017-01-17	MOD-1398	Line, stack, and area charts do not display a metric gap when no metrics are available during a time period.

Storage Module

There are no known issues for this release.

Virtualization Module

There are no known issues for this release.

Web Server Module

Publication date	Issue number	Description
2017-03-17	MOD-320	Some KPI ad hoc searches transform data with the stats command and do not retain time fields. The KPIs do not render anything and do not show thresholding details.
2017-03-17	MOD-538	When you add a new tab with panels and refresh the page, the page breaks.