About the Content Pack for Shared IT Infrastructure Components

Many critical problems in your IT environment are caused by issues outside of the application stack, such as a failure or change somewhere within the services provided by IT for use across applications and departments. The Content Pack for Shared IT Infrastructure Components supports approaches for mapping these dependencies within Splunk IT Service Intelligence (ITSI).

When you finish configuring this content pack, your IT department will have a central view of all IT alerts, changes, and tickets. This information is reflected with the Service Analyzer and glass table views. Use these dashboards to correlate shared IT issues with their impact on one or more business services.

The following image shows all of the services included in the content pack as displayed in the Service Analyzer: This image shows a tree view of the shared IT infrastructure components in the service analyzer.

Content pack contents

The Content Pack for Shared IT Infrastructure Components contains the following objects:

  • A saved service analyzer view called IT Infrastructure filtered to IT services.
  • A glass table called IT Infrastructure Health showing per-domain health of IT services. The widgets drill down to the saved service analyzer.
  • Multiple services in a dependency tree:
    • Shared IT Infrastructure
    • Active Directory
    • SMPT Infrastructure
    • License Services
    • Networking
    • VMWare
    • Shared Storage
    • Shared Database Environment
    • Network Services
    • Telecom
    • Authentication
    • SMTP - Internal Backbone
    • SMTP - DMZ Out
    • SMTP - DMZ In
    • Exchange OWA
    • Exchange Mailstore
    • Exchange CAS
    • WAN
    • VPN
    • Load Balancers
    • LAN
    • Firewall
    • Cloud VPN Links
    • VMware VMs
    • VMware ESXi
    • VMware Datastores
    • Shared Storage - Volumes
    • Shared Storage - LUNs
    • Shared Storage - Arrays
    • NTP
    • DNS
    • DHCP
    • Telepresence App
    • Telephony
    • Two Factor Authentication
    • External Authorization Service

ITSI and ITE Work support

The content in the Content Pack for Monitoring Shared IT Infrastructure Components is only supported in ITSI.

Installation

If you're using ITSI version 4.9 or later, you can install the Content Pack for Monitoring Shared IT Infrastructure Components after installing the Splunk App for Content Packs. Install the content pack on the same search head where you installed ITSI. For installation instructions, see Install and configure the Content Pack for Monitoring Shared IT Infrastructure Components.

If you're using ITSI version 4.8 or earlier, you need to install the content pack using the backup ZIP file. For installation instructions, see Install and configure the Content Pack for Monitoring Shared IT Infrastructure Components.

Deployment requirements

Use the following table to determine ITSI version compatibility with various versions of the Content Pack for Shared IT Infrastructure Components:

Splunk App for Content Packs version Content Pack for Shared IT Infrastructure Components version ITSI version
2.0.0 1.4.0 4.17.x
1.9.0 1.3.3 4.15.x, 4.16.x
1.3.0 1.3.2 4.9.0 and higher