Known issues in Splunk IT Service Intelligence

This version of IT Service Intelligence (ITSI) has the following known issues and workarounds.

Entities

Date filed Issue number Description
2025-09-05ITSI-41680Users with itoa_user, itoa_analyst roles seeing 403 error when retrieving entity drilldowns in service analyzer.
2024-04-11ITSI-35019, ITSI-35068Entity dashboard page re-renders when the entity sidebar is closed or opened.

Uncategorized issues

Date filed Issue number Description
2025-09-05ITSI-41681Filter Episode Monitoring alerts before passing them to EventIQ policies.

Workaround:

Update the filtering criteria for the Event iQ policy to filter out all monitoring alerts created by other policies in order to avoid overlap. For example:

AND source does not match *Episode Monitoring*, or AND itsi_policy_id does not match *episode*.
2025-08-19ITSI-41290Splunk throttling is enabled for default connections when disabled in connection payload.
2025-08-05ITSI-41271When clicking impacted services from Episode Review, an error occurs on the Service Analyzer.