Splunk® Content Packs for ITSI and IT Essentials Work

Splunk Content Packs for ITSI and IT Essentials Work

Acrobat logo Download manual as PDF


Acrobat logo Download topic as PDF

Overview of content packs for ITSI and IT Essentials Work

Splunk Content Packs provide out-of-the-box content that you can use to quickly set up your Splunk IT Service Intelligence (ITSI) or IT Essentials Work environment. This content can include preconfigured KPI base searches, service templates, saved glass tables, and other objects for use within ITSI or IT Essentials Work.

Once installed, the objects within a content pack are configurable. If you want to change a search's frequency, adjust latency, or change calculation methods, you can edit the objects directly.

Most content packs process data collected through the use of Splunk add-ons. Add-ons collect host, network, and other data from computers that you install them on and map that data to a data model. Add-ons power the data underlying the metrics for each content pack. For more information, see About Splunk add-ons in the Splunk Add-ons manual.

The Splunk App for Content Packs

The Splunk App for Content Packs allows you to access content packs, preview their contents, and install them in your environment. Download the Splunk App for Content Packs on Splunkbase. The Splunk App for Content Packs is compatible with ITSI and IT Essentials Work versions 4.9.0 and higher. As new content packs become available or existing content packs are updated, you can download the most recent version of the Splunk App for Content Packs to get this new content. When you install an updated version of a content pack, you can see which objects are new to the content pack.

Once you've installed the Splunk App for Content Packs, you can go to Configuration > Data Integrations to see the available content packs.

App for CP 1 3 0.png

Install the Splunk App for Content Packs

To access the content packs on the Data Integrations page, you have to install the Splunk App for Content Packs. You can install the Splunk App for Content Packs on your Splunk Cloud Platform or on-premises environment. See Install the Splunk App for Content Packs for steps to install the Splunk App for Content Packs.

Content Packs in IT Essentials Work

The Splunk App for Content Packs installs supported content packs in your IT Essentials Work environment. You can only install entity-type objects in IT Essentials Work. Note: When you upgrade from IT Essentials Work to ITSI, objects in your environment persist after the upgrade.

App for CP 1 3 0 for ITEW.png

Available content packs

These content packs are available.

Content pack Description Supported Apps
Content Pack for Amazon Web Services Dashboards and Reports Provides the elements necessary to monitor the health and availability of your AWS environment. This content pack is automatically installed when you install the Splunk App for Content packs, so it doesn't have a chiclet on the Data Integrations page. ITSI and IT Essentials Work
Content Pack for Example Glass Tables Provides a starting point for monitoring various use cases on the glass table canvas. ITSI
Content Pack for ITE Work Alert Routing Extends the default IT Essentials Work alert functionality by allowing you to take an external action when an alert is triggered, such as sending an email. IT Essentials Work
Content Pack for ITSI Monitoring and Alerting Provides a prescriptive blueprint for enterprise-wide alerting across all your ITSI services. ITSI
Content Pack for Microsoft 365 Provides the elements necessary to monitor the health and availability of your Microsoft 365 environment. ITSI and IT Essentials Work
Content Pack for Microsoft Exchange Provides the elements necessary to monitor the health and availability of your Exchange environment. ITSI and IT Essentials Work
Content Pack for Monitoring Citrix Provides a quick way to build ITSI services to monitor your Citrix virtual apps and desktop infrastructure. ITSI
Content Pack for Monitoring Microsoft Windows Provides the elements needed for monitoring your OS-level health related to Windows servers. ITSI
Content Pack for Monitoring Phantom as a Service Provides knowledge objects to monitor the health of your Phantom server environment. ITSI
Content Pack for Monitoring Pivotal Cloud Foundry Provides the elements necessary for monitoring your Pivotal Cloud Foundry deployment. ITSI
Content Pack for Monitoring Splunk as a Service Provides OS and application-level monitoring of your Splunk Enterprise environment. ITSI
Content Pack for Monitoring Unix and Linux Provides the elements needed for monitoring your OS-level health related to Linux and certain types of Unix servers. ITSI
Content Pack for NetApp Data ONTAP Dashboards and Reports Provides the elements necessary to monitor the health and availability of your NetApp environment. This content pack is automatically installed when you install the Splunk App for Content packs, so it doesn't have a chiclet on the Data Integrations page. ITSI and IT Essentials Work
Content Pack for Shared IT Infrastructure Components Supports approaches for mapping service dependencies within ITSI. ITSI
Content Pack for Splunk Infrastructure Monitoring Provides the elements necessary to use monitoring tools to visualize and troubleshoot your Splunk Infrastructure Monitoring cloud services. ITSI and IT Essentials Work
Content Pack for Splunk Synthetic Monitoring Provides the elements necessary to use monitoring tools to visualize and troubleshoot your Splunk Synthetic Monitoring. ITSI and IT Essentials Work
Content Pack for Third-Party APM Provides the elements necessary to monitor the health of applications that use third-party APM tools (AppDynamics, DynaTrace, and New Relic). ITSI and IT Essentials Work
Content Pack for Unix Dashboards and Reports Provides reports, alerts, and dashboards for Linux and Unix management. This content pack is automatically installed when you install the Splunk App for Content packs, so it doesn't have a chiclet on the Data Integrations page. ITSI and IT Essentials Work
Content Pack for VMware Dashboards and Reports Provides the elements necessary to monitor the health and availability of your virtual environments. This content pack is automatically installed when you install the Splunk App for Content packs, so it doesn't have a chiclet on the Data Integrations page. ITSI and IT Essentials Work
Content Pack for VMware Monitoring Provides the elements necessary to monitor the performance of the main components in a VMware vSphere environment. ITSI
Content Pack for Windows Dashboards and Reports Provides deep visibility into the health and performance of your Microsoft Windows Server and Active Directory environments. ITSI and IT Essentials Work
Last modified on 25 October, 2021
  NEXT
Migrate from legacy apps to content packs

This documentation applies to the following versions of Splunk® Content Packs for ITSI and IT Essentials Work: current


Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters