Implementing Splunk IT Service Intelligence 4.15

Duration : 3 Days (24 Hours)

Implementing Splunk IT Service Intelligence 4.15 Course Overview:

This course is designed for administrator users who will implement Splunk IT Service Intelligence for analysts to use. The first day includes the day of content from Using Splunk IT Service Intelligence.

Intended Audience:

  • IT Administrators: Those responsible for configuring and maintaining IT Service Intelligence in their organizations.
  • IT Analysts: Analysts who want to deepen their understanding of advanced features in IT Service Intelligence to better monitor and optimize IT services.
  • Splunk Administrators: Administrators familiar with Splunk Enterprise who are extending their expertise to IT Service Intelligence.
  • IT Operations Professionals: Professionals involved in IT operations, service monitoring, and incident management.
  • Splunk Power Users: Individuals who are advanced users of Splunk and want to specialize in IT Service Intelligence.
  • IT Service Managers: Managers who need a comprehensive understanding of ITSI to make informed decisions and lead their teams effectively.

Learning Objectives of Implementing Splunk IT Service Intelligence 4.15:

  • IT Service Intelligence analyst user training
  • Designing, Implementing Services and Searches
  • Defining and Adding Entities
  • Defining Service Templates, and User Access
  • Using Predictive Analytics
  • Creating and Defining Correlation Searches and Event Aggregation

Module 1 – Monitoring Services with Service Analyzers

  • Plan ITSI services
  • Design service KPI properties
  • Identify entity-oriented KPIs
  • Identify dependencies between services

Module 2 – Monitoring Entities with Infrastructure Overview

  • Analyze a data environment
  • Identify necessary data sources for KPIs
  • Plan data intake for IT Service Intelligence configuration
  • Implement base searches to support service design

Module 3 – Visualizing Services with Glass Tables

  • Identify ITSI roles and capabilities
  • Describe service level roles and team ownership
  • Control access to ITSI views

Module 4 – Investigating Issues with Deep Dives

  • Use a service design to implement services in ITSI
  • Create KPIs using base searches
  • Configure basic KPI settings for calculation and aggregation
  • Configure KPI lag and backfill
  • Set KPI importance
  • Calculate service health score

Module 5 – Managing Alerts and Episodes

  • Define entities and entity types
  • Creating and importing entities
  • Creating a service using pre-built KPIs
  • Associate entities with an existing service
  • Delete or retire entities
  • Define and use pseudo entities
  • Monitoring entities

Module 6 – Templates and Dependencies

  • Define service template use cases
  • Create service templates
  • Create new services from templates
  • Create dependencies between services

Module 7 – Thresholds and Time Policies

  • Configure KPI thresholds
  • Use aggregate and entity-level thresholds
  • Use static and adaptive thresholds
  • Apply time policies to thresholds
  • Create custom threshold templates

Module 8 – Anomaly Detection and Predictive Analytics

  • Define anomaly detection
  • Define predictive analytics
  • Configure anomaly detection for KPIs
  • Configure predictive analytics for services

Module 9 – Correlation Searches and Multi-KPI Alerts

  • Define new correlation searches
  • Define Multi-KPI alerts
  • Manage notable event storage

Module 10 – Aggregation Policies

  • Define aggregation policy capabilities
  • Modify the default aggregation policy
  • Understand Smart Mode
  • Create new aggregation policies
  • Use aggregation policies to automate notable event response

Implementing Splunk IT Service Intelligence 4.15 Course Prerequisites:

To be successful in the course “Using Splunk IT Service Intelligence,” students should have a working understanding of the following prerequisites:

  1. Either these completed Certification Paths:
    • Splunk Enterprise System Administration
    • Splunk Enterprise Data Administration

Or, alternatively, these individual courses:

  • What is Splunk?
  • Intro to Splunk
  • Using Fields
  • Visualizations
  • Introduction to Knowledge Objects
  • Creating Knowledge Objects
  • Creating Field Extraction

Discover the perfect fit for your learning journey

Choose Learning Modality

Live Online

  • Convenience
  • Cost-effective
  • Self-paced learning
  • Scalability


  • Interaction and collaboration
  • Networking opportunities
  • Real-time feedback
  • Personal attention


  • Familiar environment
  • Confidentiality
  • Team building
  • Immediate application

Training Exclusives

This course comes with following benefits:

  • Practice Labs.
  • Get Trained by Certified Trainers.
  • Access to the recordings of your class sessions for 90 days.
  • Digital courseware
  • Experience 24*7 learner support.

Got more questions? We’re all ears and ready to assist!

Request More Details

Please enable JavaScript in your browser to complete this form.

Subscribe to our Newsletter

Please enable JavaScript in your browser to complete this form.