Accelerate Troubleshooting with More Actionable Insights in Splunk ITSI 4.19

In today's rapidly evolving digital landscape, the demand for seamless, efficient IT operations has never been higher. As businesses strive to meet the increasing expectations of their customers while maintaining optimal performance, the need for advanced solutions that streamline processes and enhance productivity has become paramount.

We are thrilled to announce Splunk IT Service Intelligence (ITSI) 4.19 latest feature enhancements, designed to operationalize the way organizations manage their IT services. With a focus on simplifying service and entity management, enhancing user experience, and refining navigation, Splunk ITSI 4.19 empowers IT teams to achieve greater efficiency and agility in their operations.

When taking a closer look, see that features labeled ‘Preview’ are not yet generally available in ITSI, but are made available to select private preview participants and must be pre-approved by Splunk. Contact your account team to learn more. 

Simplified Service Decomposition

Service Sandbox (GA) - Managing and aligning complex IT services can be challenging, but with drag and drop abilities to map services in the UI, users can oversee and coordinate a wide range of services for even faster service decomposition. Whether you’re new to Splunk ITSI or building out services for a new business unit, the in-product UI experience of ITSI service sandbox allows you to create multiple sandboxes for each of your teams, simulate your services and their health scores, and identify potential errors before publishing to service analyzer. For more information, read here.

Event and Alert Onboarding for Event Analytics (Preview) - Experience simplified alert onboarding by quickly starting the event analytics feature with an assisted workflow. With seamless event data integration from Splunk Observability Cloud and the ability to normalize and enrich alert data from a unified UI, users can easily ingest alerts from 3rd party tools (like Nagios, Solarwinds, and Microsoft SCOM) with automated, state-aware event correlations. Additionally, users can now: 

• Leverage webhook integrations to send alert data and run alert actions between ITSI and third-party integrations. 
• Export episodes and download as CSV. 
• Utilize the bidirectional Jira Cloud integration to send ITSI alerts to Jira.

ITSI Configuration Assistant (GA) - Proactively surface insights in the health of ITSI objects (KPIs, Services, Entities) and configurations (starting with KPI thresholds). Receive recommendations on next steps to remediation in a one-stop-shop and for bulk configuration updates for KPIs. Read in more detail here.

Greater Accuracy

Entity Normalization (Preview) - Create a unified and consistent view of entities from multiple sources by enhancing your hostname based entity reconciliation, regardless of datasource and support for data enrichment. 

KPI Drift Detection (Preview) - Catch sudden changes in KPIs before they are impacted and proactively determine slow, long-trending changes (like slowly increasing latency over months) that potentially indicate an issue so that they can be remediated before problems arise.

Event Analytics Scalability and Stability (Preview) - Ingest and process a higher number (10x) of notable events with lower latency (at 100K events/min). This robust enhancement delivers an event pipeline at high scale and high availability (rules engine) to handle indexer topology changes, and decreased rules engine latency from multiple minutes down to seconds. 

Entity-level Adaptive Thresholding (Preview) - This extension of ITSI 4.18’s machine learning (ML)-assisted thresholding accelerates troubleshooting with advanced anomaly detection and Mobile Crash Analytics. Additionally, this comes fully correlated with Full-fidelity Session and Trace Analytics. 

Enhanced Service Troubleshooting Experience at Scale

Service Impact Analysis (GA) - Identify the origin of problems for any degraded service and rank the top contributors (e.g. KPIs) by priority to reduce manual investigations and provide a quick starting point for troubleshooting. To learn more, take a closer look.

Improved Upgrade Experience

New Pre-check Readiness - Now when running a pre-check on the ITSI 4.19 upgrade readiness dashboard, users can identify more actionable insights at a glance. These new pre-checks help identify entities associated with deleted or non-existent services, issues with entity filtering, and when the number of KPIs using a specific search base exceeds a limit.

Backup and Restore - With ITSI backup and restore process enhancements, users now have an option to further protect critical data and ensure the continuity of their services. Streamline recovery processes when creating restore jobs by viewing any missing dependent objects in backup files and preventing restore job failures. 

Follow all the conversations coming out of #splunkconf24!

Follow @splunk