| 2026-06-28 |
ITSI-45333 |
Saved-search data sources are removed when users save new or existing glass tables. |
| 2026-06-10 |
ITSI-40144 |
Updating a service template linked to a published service sandbox creates a perpetual refresh-queue job. |
| 2026-04-29 |
ITSI-43682 |
ITSI migration stalls during the backup phase on FIPS-enabled Splunk Cloud stacks. |
| 2026-04-14 |
ITSI-43891 |
AI threshold recommendations fail with an external search command error when incompatible MLTK and PSC app versions are installed. |
| 2026-04-01 |
ITSI-43643 |
Linked entities are missing from the service side panel and health score calculations. |
| 2026-03-29 |
ITSI-43450 |
An intermittent error prevents users from downloading backup files in the UI. |
| 2026-03-26 |
ITSI-43941 |
Disabling correlation searches in bulk clears the notable event title and description. |
| 2026-03-23 |
ITSI-43443 |
KPI sparklines display fluctuations even when the underlying data is stable. |
| 2026-03-23 |
ITSI-40938 |
The ITSI usage dashboard displays SVC entitlement values that differ from Cloud Monitoring Console values. |
| 2026-03-22 |
ITSI-42385 |
Entity synchronization overwrites manually created service tags. |
| 2026-03-19 |
ITSI-43532 |
Non-admin users cannot filter services in maintenance windows. |
| 2026-03-09 |
ITSI-41883 |
Opening ITSI pages triggers an excessive number of ad hoc searches. |
| 2026-03-09 |
ITSI-42382 |
Changing ITSI index retention removes the SA-IndexCreation app from Splunk Cloud indexers. |
| 2026-03-06 |
ITSI-43127 |
A partial backup fails when it contains a single service template. |
| 2026-02-11 |
ITSI-42397 |
The getservicetopology command increases correlation-search runtimes and causes scheduled searches to be skipped. |
| 2026-02-02 |
ITSI-41193 |
Grouping events from itsi_tracked_alerts into itsi_grouped_alerts is delayed by 5 to 10 minutes. |
| 2026-01-28 |
ITSI-39858 |
Updating a ServiceNow incident for an episode creates a new incident instead of updating the existing one. |
| 2026-01-22 |
ITSI-41868 |
Episode Review does not display owner-assignment changes until the page is fully refreshed. |
| 2026-01-20 |
ITSI-42297 |
The Upgrade Readiness dashboard reports errors during ITSI upgrade validation. |
| 2026-01-14 |
ITSI-41131 |
NEAP action-rule conditions do not update episode status and severity as configured. |
| 2025-12-11 |
ITSI-41680 |
Users with itoa_user or itoa_analyst roles receive a 403 error when loading entity drilldowns in Service Analyzer. |
| 2025-12-04 |
ITSI-41383 |
Action rules do not run for some NEAP policies even when all configured conditions are met. |
| 2025-12-01 |
ITSI-42038 |
Users can create glass tables but receive an undefined error when opening them. |
| 2025-11-12 |
ITSI-42132 |
A new episode is created before the existing episode meets its configured break conditions. |
| 2025-11-12 |
ITSI-42447 |
Correlation searches do not create notable events for some matching results. |
| 2025-11-04 |
ITSI-42373 |
Default scheduled backups report missing dependencies even though the option to include dependencies is unavailable. |
| 2025-10-21 |
ITSI-42304 |
ITSI pages do not load when an API request references a role that no longer exists. |
| 2025-10-20 |
ITSI-40571 |
CSV imports intermittently create duplicate services after an upgrade. |
| 2025-10-13 |
ITSI-41004 |
Related alerts are unexpectedly split into separate episodes. |
| 2025-10-12 |
ITSI-41447 |
The migration utility does not correct entities linked to incorrect or deleted services. |
| 2025-10-06 |
ITSI-41469 |
Some HEC notable events are indexed successfully but do not create episodes. |
| 2025-09-23 |
ITSI-41644 |
The default transforms configuration contains duplicate itsi_refresh_queue stanzas. |
| 2025-09-16 |
ITSI-41459 |
The Event Analytics monitoring dashboard responds slowly and can destabilize the ITSI environment. |
| 2025-09-15 |
ITSI-41065 |
KPI saved searches run in the server time zone instead of the configured user time zone. |
| 2025-09-11 |
ITSI-41219 |
A reset-only alert creates an unintended incident. |
| 2025-09-08 |
ITSI-41359 |
Glass table ownership cannot be changed through the REST API without changing the table URL. |
| 2025-09-08 |
ITSI-39878 |
Impacted KPI values differ between the overview and drilldown views. |
| 2025-09-08 |
ITSI-41472 |
Users with the itoa_analyst role cannot link tickets to episodes. |
| 2025-09-08 |
ITSI-41467 |
Users intermittently receive a search-not-found error when creating or linking ServiceNow tickets from ITSI. |
| 2025-09-08 |
ITSI-41362 |
The custom ticketing system selection is delayed when users link a ticket to an episode. |
| 2025-09-08 |
ITSI-41385 |
An episode's severity unexpectedly changes to Normal even when no policy condition changes the severity. |
| 2025-09-08 |
ITSI-41455 |
A NEAP action runs twice after an upgrade. |
| 2025-09-04 |
ITSI-41537 |
Selected import searches do not update entities after upgrading to ITSI 4.20.1. |
| 2025-09-04 |
ITSI-41466 |
The appserver.py process consumes excessive memory during ITSI search-head restarts and indexer rolling restarts. |
| 2025-09-03 |
ITSI-41648 |
An invalid capability warning appears in splunkd logs at every Splunk startup. |
| 2025-08-25 |
ITSI-41356 |
Events are not processed from itsi_tracked_alerts into itsi_grouped_alerts. |
| 2025-08-18 |
ITSI-41053 |
Backfill and event-processing issues persist after upgrading to ITSI 4.20.1. |
| 2025-08-13 |
ITSI-41063 |
Episode creation fails when ITSI summary events do not contain indexed_is_service_max_severity_event. |
| 2025-08-07 |
ITSI-41110 |
Saved Service Analyzer filters are not applied consistently. |
| 2025-08-04 |
ITSI-41100 |
The ITSI upgrade is blocked when a service exceeds the KPI-per-base-search limit. |