Fixed Issues in Splunk IT Service Intelligence

This version of IT Service Intelligence was released on February 27, 2025 and includes fixes for the following issues. Issues are listed in all relevant sections, so some issues might appear more than once.

Adaptive Thresholding

Date resolved Issue number Description
2024-09-18 ITSI-37270 Use Recommended Thresholding Configuration cannot use all backfilled events
2024-06-26 ITSI-35070 On few KPIs using adaptive threshold, the results from the scheduled overnight run seem very different from the preview adaptive threshold results

Notable Events

Date resolved Issue number Description
2024-09-17 ITSI-37188 ITSI does not check to see if ServiceNow Incident exists before attempting to close it
2024-07-19 ITSI-36713 Rules engine not backfilling events when the RE is restarted
2024-07-09 ITSI-36397 Actions are not performed if the event is breaking the episode based on the timebased criteria and grouping into a new group.
2024-06-25 ITSI-36103, ITSI-36215 NEAP action rules triggers false alert emails even though the conditions are not satisfied

Notable Event Aggregation Policies

Date resolved Issue number Description
2024-09-17 ITSI-37188 ITSI does not check to see if ServiceNow Incident exists before attempting to close it
2024-07-19 ITSI-36713 Rules engine not backfilling events when the RE is restarted
2024-07-09 ITSI-36397 Actions are not performed if the event is breaking the episode based on the timebased criteria and grouping into a new group.
2024-06-25 ITSI-36103, ITSI-36215 NEAP action rules triggers false alert emails even though the conditions are not satisfied

Glass Table

Date resolved Issue number Description
2024-12-12 ITSI-37082, ITSI-37083 Duplicate search job running while opening/reloading glass table, causing slowness.

KPI Search Calculation

Date resolved Issue number Description
2024-06-21 ITSI-35981 Time based threshold policies are not working for the entities.

Performance

Date resolved Issue number Description
2024-08-14 ITSI-36787, ITSI-31548 App SA-ITSI-AT-Recommendations and SA-ITSI-DriftDetection failing Python3 readiness check

Service Analyzer

Date resolved Issue number Description
2025-01-16 ITSI-38565 Service analyzer page shows error modals for some searches automatically cancelled after 65 seconds.
2025-01-15 ITSI-38711 Dispatch search jobs with 'itsi' as app param rather than 'search' default value
2025-01-07 ITSI-38647 Add service analyzer search timeout value to itsi_service_analyzer.conf file.
2024-07-17 ITSI-35809 Could not retrieve health scores for the service tiles.

Predictive Analytics

Date resolved Issue number Description
2025-01-15 ITSI-38715 Predictive analysis Dashboard's cause analysis tab is not showing R2 results

Uncategorized issues

Date resolved Issue number Description Release version
2026-06-16 N/A This version of Splunk IT Service Intelligence is a maintenance release and fixes multiple issues. 4.20.2
2025-06-02 ITSI-40076 Alerts are not being sent to PagerDuty from ITSI Episodes 4.20.1
2025-05-22 ITSI-40042 Service impact analysis tab takes longer to load when the stack has 6500 services 4.20.1
2025-05-19 ITSI-40031 SOAR action fails when set to trigger when an episode breaks 4.20.1
2025-05-12 ITSI-40021 ds_sources is not getting updated when the aliases get updated 4.20.1
2025-05-12 ITSI-40007 Restore fails with Resource not found from itsi_sandbox.py 4.20.1
2025-05-13 ITSI-39966 The new itsi_nats_metrics index in ITSI 4.20.0 is hard-coded and cannot be configured 4.20.1
2025-05-14 ITSI-39794 After upgrade to 4.20 - Severity fields are not picked up intermittently 4.20.1
2025-04-15 ITSI-39700 NATS binary for FIPS 140-3 4.20.1
2025-04-10 ITSI-39630 Entity side panel does not display unit alongside values until the page is reloaded 4.20.1
2025-04-09 ITSI-39629 Episode grouping stops when Event IQ is enabled 4.20.1
2025-04-11 ITSI-39628 Itoa_admin/sc_admin users are unable to run fix or start new precheck from ITSI upgrade readiness page 4.20.1
2025-05-01 ITSI-39580 Episodes views JSON gets corrupted and too large 4.20.1
2025-03-24 ITSI-39488 ITSI Episode review activity tab drilldown search uses "All time" leading to slowness 4.20.1
2025-03-18 ITSI-39471 Don't execute actions for BDT events for inactive episodes by default 4.20.1
2025-03-26 ITSI-39470 Notable event aggregation policy configuration page won't save when time-based action rules are configured. 4.20.1
2025-03-26 ITSI-39406 Episode Review result list display does always not match the last filter. 4.20.1
2025-04-03 ITSI-39405 Unable to save episode using Save as option in ITSI 4.20.0 4.20.1
2025-04-01 ITSI-39387 Periodic backfill for similar events after 4.20 upgrade 4.20.1
2025-03-19 ITSI-39383 Sometimes the events count in the header do not match with the count in the events table under the episode detail view 4.20.1
2025-04-23 ITSI-39378 Unable to navigate to second page of episode comments 4.20.1
2025-02-27 ITSI-39146 Pagination in the Comments tab should not be displayed on the side 4.20.1
2025-05-20 ITSI-38265 For entities marked as retireable, policy name is unknown. 4.20.1
2025-03-16 ITSI-37950 500 Internal Server Error appears in ITSI due to python libraries versions conflicts with other apps. 4.20.1
2025-01-08 ITSI-38545 Upgrade Readiness Dashboard - failing to fix "Incorrect service linked to entity" and "Dependent services missing" 4.20.0
2024-12-06 ITSI-37977 The list of saved episodes fails to load, and displays a kvstore memory limit error. 4.20.0
2024-12-05 ITSI-33715 Recommender returns same threshold value for different severity in case of difference in data in decimal points 4.20.0
2024-06-20 ITSI-36019 Discrepancy in time in the user_access_interface.log file 4.20.0
2024-06-12 ITSI-35922 events from source itsi_appserver.log are way longer than new increased TRUNCATE limit 4.20.0
2024-06-06 ITSI-35608 Getting new lines before and after every line of CSV when downloading it on windows instance 4.20.0
2024-06-05 ITSI-33278 Cannot create a correlation search with all special character 4.20.0

Fixed Issues in Splunk IT Service Intelligence

This version of IT Service Intelligence was released on June 16, 2025 and includes fixes for the following issues. Issues are listed in all relevant sections, so some issues might appear more than once.