Deep dives in Splunk IT Service Intelligence (ITSI) allow for an in-depth analysis of services and their
KPIs over time, providing a detailed view of the operational health and performance trends. One of
the powerful actions that can be performed with a deep dive is the creation of a Multi-KPI alert from
the deep dive's current state. This functionality enables users to define alerts based on the complex
conditions observed during the deep dive analysis, allowing for the early detection of similar
situations in the future. By configuring a Multi-KPI alert directly from a deep dive, ITSI users can
leverage their insights and observations to proactively monitor for patterns or conditions that may
indicate potential service degradation or failure, enhancing the overall responsiveness and
effectiveness of the IT monitoring strategy.
