A custom command that will retrieve the values of the time-based ITSI thresholds that are set for a KPI. Works with static ITSI thresholds or adaptive thresholds.
| getitsithresholds [services=<serviceid-comma-separated-string>] mode=(now|nowextended)
or
| getitsithresholds service=<serviceid-string> kpi=<kpi-string> mode=(normal|raw|columns)
See the Splunkbase page for more detailed documentation
Output from this command (using mode=normal) can be charted using the "Region Chart Visualization" here: https://splunkbase.splunk.com/app/4911/
Copyright (C) 2020 Chris Younger | Splunkbase | Source code | Questions, Bugs or Suggestions | My Splunk apps