Back to Floor
Anomaly Detection & Ops • Room 3
Troubleshooting ITSI
Common ITSI issues: KPIs showing "N/A" (base search errors), slow Glass Tables (too many widgets), KV Store failures (configuration disappears), and entity mismatches. The ITSI Health Check dashboard provides centralized diagnostics.
Key resources: itsi_kpi_summary.log for KPI problems, itsi_event_management.log for Notable Event issues, and "splunk show kvstore-status" for KV Store diagnostics. If services show "Unknown" health, check the KV Store first.
If everything suddenly shows "Unknown", it's almost always a KV Store issue. Run "splunk show kvstore-status" immediately.
Knowledge Check
Prove your understanding to clear the room (Rewards XP)
Question 1 of 2
A KPI shows "N/A". What is the most likely cause?