Hello -
Is there a recommended URL parameter to use in the TA for Ivanti Service Manager (TA-ivanti-ism) to essentially ingest all Incidents data?
The default is %24filter%3DStatus%20eq%20%27Active%27%20or%20Status%20eq%20%27Logged%27
which resolves to $filter=Status eq 'Active' or Status eq 'Logged'
.
We attempted %24filter%3DStatus%20eq%20%27*%27
which resolves to $filter=Status eq '*'
, but this was not successful in bringing in data.
Simply leaving the URL parameter blank also was unsuccessful in returning any data.
Thanks for your help.
Did you ever get this working? I am running into the same issue.
I thought i could just login to the ISM and go to the Incident workspace and select the search i wanted to pull from "All Active Incidents" (i.e. http://ism_url/heat/Default.aspx#1622727356175).
I don't think this is working because i don't see any data in my index yet.