Known issues in IT Essentials Work

IT Essentials Work (ITEW) 4.21.x includes following known issues and workarounds.

Entities

Date filed Issue number Description Release Version
2025-09-05 ITSI-41680 Users with itoa_user, itoa_analyst roles seeing 403 error when retrieving entity drilldowns in service analyzer. 4.21.0
2024-04-11 ITSI-35019, ITSI-35068 Entity dashboard page re-renders when the entity sidebar is closed or opened. 4.21.0

Uncategorized Issues

Date filed Issue number Description Release version
2025-10-27 ITSI-42397

Correlation searches slower on ITSI 4.21.0.

Workaround:

The long term solution is to look for the new version for ITSI with the fix for the bug ITSI-42397. If you are not yet using the Event IQ feature for your event policies, comment the command from the macros.

Steps:

  1. Locate macros: apply_entity_lookup(1) check their definitions, and command the last part with getservicetopolog

  2. Change the last line to comment the macro from

CODE 
eval sec_grp="default_itsi_security_group" | `match_entities_to_correlation_search($entity_lookup_field$, sec_grp)` | `filter_maintenance_entities` | getservicetopology

to

CODE 
eval sec_grp="default_itsi_security_group" | `match_entities_to_correlation_search($entity_lookup_field$, sec_grp)` | `filter_maintenance_entities` ```| getservicetopology

To upgrade to fixed version, revert to uncomment the macro.

 4.21.0
2025-08-22 ITSI-41542 The Send to Splunk SOAR notable event action doesn't create artifacts. 4.21.0