Which index will contain useful error messages when troubleshooting ITSI issues?
Which index will contain useful error messages when troubleshooting ITSI issues?
When troubleshooting ITSI (IT Service Intelligence) issues, the index that will contain useful error messages is _internal. This index is used by Splunk to store internal logs and diagnostic information, which includes data on the functioning of ITSI components. It helps in understanding the underlying issues as it logs various events and errors that occur within the environment.
_internal contains everything that is under the hood of ITSI
D. itsi_notable_audit