

You can deploy ITSI across any distributed architecture supported by Splunk Enterprise.
SPLUNK ITSI INSTALL
For instructions on installing ITSI on a single Splunk Enterprise instance, see Install Splunk IT Service Intelligence on a single instance. You can use a single instance deployment for a lab or test environment, or a small system with one or two users running concurrent searches. Use forwarders to collect your data and send it to the single instance for parsing, storing, and searching. A single instance functions as both a search head and an indexer. See Components of a Splunk Enterprise deployment in the Capacity Planning Manual.įor a simple and small deployment, install ITSI on a single Splunk platform instance. Before you deploy Splunk IT Service Intelligence on premises, familiarize yourself with the components of a Splunk platform deployment. Splunk IT Service Intelligence is also available in Splunk Cloud Platform. You can deploy Splunk IT Service Intelligence in a single instance deployment or a distributed search deployment. See the Splunk products version compatibility matrix.

This slowness might indicate your current hardware is insufficient or badly configured, or you might have a high latency dispatch that requires architecture changes. If the query takes more than 2-5 seconds to complete, check performance in the Job Inspector to investigate the issue. Index=_introspection sourcetype=splunk_resource_usage component=Hostwide earliest=-5m | timechart avg(data.cpu_user_pct) by host Verify your existing hardware performance using the following search query:.Deleting or renaming this user breaks ITSI installation and operation. Make sure your Splunk ITSI instance includes the default admin user.Entities for hosts must include, at a minimum, the IP address, host name, and designated role. Entities are usually hosts, but can also be users, mobile devices, and so on. Compile a list of services, KPIs, and glass table views that you want to create.Review the system and hardware requirements and the search head and indexer considerations before deploying IT Service Intelligence.īefore you deploy IT Service Intelligence, perform the following steps: Deploy Splunk IT Service Intelligence (ITSI) on a configured Splunk platform installation.
