SLI Analyzer

In the case of data retrieval failures for any data source, except for Splunk Observability, you can check this data source's event logs:

• The data source must be added with the direct connection method
• Event logs must be activated in advance for your data source

⛭ Can't create an analysis for a data source

SLI analyses relate to the same project as the data source you use to analyze SLI

It means that:

• Users with the Organization Viewer role can see all analyses in the organization.
• However, they can create analyses only if they have additional project-level permissions

On top of this, a data source within the permitted project must have historical data retrieval configured.

Let's go over two examples. Suppose, a user is assigned with a project role:

• Historical data retrieval is set for data sources in their project (i.e. Maximum Period for Historical Data Retrieval set to ≥ 5 minutes).
  The user can create an analysis.
• NO historical data retrieval is set for data sources in their project (i.e., the Maximum Period for Historical Data Retrieval is set to < 5 minutes).
  The user cannot create any analyses.

⛭ Missing data

Missing data can be caused by the data source's retention policy. If you see missing data, ensure that the data source you use for the SLI analysis contains the data in the requested time range. Check your source's data retention policy.

Alternatively, your data source can have the protection that prevents data exchange with Nobl9. In this case, an allowlist with Nobl9 IPs can help.

💻ip allowlist

IP addresses to include in your allowlist for secure access:

If you're using app.nobl9.com instance:

• 18.159.114.21
• 18.158.132.186
• 3.64.154.26

If you're using us1.nobl9.com instance:

• 34.121.54.120
• 34.123.193.191
• 34.134.71.10
• 35.192.105.150
• 35.225.248.37
• 35.226.78.175
• 104.198.44.161

⛭ Empty SLI values distribution chart

SLI Analyzer might display an empty SLI values distribution chart after an analysis has been completed. In such a case, your data is either too sparse or too homogenous, so SLI Analyzer can't create the SLI values distribution chart.

To display the chart, change the graph time window and make sure that your data source contains the data in the selected time range.

⛭ Failed import

If your SLI analysis shows the Import failed status, check your data source logs to spot the probable cause of failure. SLI Analyzer logs display 0 under the # of Affected SLOs column

⛭ Reliability burn down over 100%

When creating an SLI Analysis using ratio metric, ensure you correctly set your data count method as incremental or non-incremental. For some data sources, "incremental" is set by default, and you need to change it before you click the Import data button. You can't change the data count method afterward.

The problem with the reliability burn down chart over 100% may occur when your data is marked as incremental, but in fact, it is not. The following chart shows the reliability burn down chart for a non-incremental ratio metric that was marked as incremental:

Image 7: Reliability burn down chart displaying >100% values