This one-day course is designed for analyst users who want to use Splunk IT Service Intelligence to manage, analyze, and optimize their IT services. Those who will implement Splunk IT Service Intelligence, please enroll in Implementing Splunk IT Service Intelligence instead.

• IT Service Intelligence Cloud features and user interface
• Creating Glass Tables
• Investigating with Deep Dives
• Managing Episodes of Notable Event

To be successful, students should have a solid understanding of the following courses:

• Splunk Fundamentals 1

Or the following single-subject courses:

• What is Splunk
• Intro to Splunk
• Using Fields
• Scheduling Reports and Alerts
• Visualizations
• Leveraging Lookups and Sub-searches
• Search Under the Hood
• Introduction to Knowledge Objects
• Enriching Data with Lookups
• Introduction to Dashboards

Module 1 – Monitoring Services with Service Analyzer

• Define key service intelligence concepts
• Describe IT Service Intelligence user roles
• Examine the IT Service Intelligence user interface
• Monitor Services with Service Analyzer

Module 2 – Visualizing Services with Glass Tables

• Planning
• Views
• Edit mode

• Top bar controls
• Configuration bar
• Visualization types
• Source

• Configure glass tables

• Drilldowns
• Services KPIs
• Ad-hoc searches, including predictive
• Service swapping

Module 3 – Investigating Issues with Deep Dives

• Default
• Custom
• Lanes

• Metric lane
• KPI lane
• Event lane

• Bulk actions
• State and level thresholds
• Graph rendering
• Entity and anomaly overlays
• Overlays as lanes
• View modules

Module 4 – Managing Episodes

• Multi-KPI alerts
• Notable events
• Notable event groups (Episodes)
• How multi KPI alerts generate notable events

• Take ownership
• Change status as needed
• Comment as needed

• Episode review
• Update an episode
• Investigate details

• Impact tab
• Timeline tab
• Similar Episodes tab
• Common fields

• Add comments
• Search
• Take action

• Bi-directional ticketing
• Reference links

• Integrations
• Views and Filters
• Permissions