This message can populate on any search head and can be found within the Messages tab of Web UI
This message is unrelated to ITSI(IT Service Intelligence) and appears when IT Essentials (ITE) Work content packs are installed on your Search Head.
It occurs because the environment is currently using IT Essentials content, which does not support Event Analytics features such as NATS and the Rules Engine—features that are available only in the IT Service Intelligence (ITSI) app.
Additionally, this message may appear after IT Essentials/ITE Work content packs have been recently installed or upgraded.
If you are currently utilizing ITSI, or plan to use it in the future, please contact your Account Team for next steps.
If you are not utilizing ITSI, this message may be safely disregarded.
Also, it is important to mention that ITSI can not be installed on the same search head as IT Essentials Work.
Splunk Documentation:

- IT operations product overview.
- About Splunk IT Service Intelligence.
- Introduction to ITE Work.
- Install ITE Work in a search head cluster environment.
- Install IT Service Intelligence in a search head cluster environment.
| Revision | Publish Date | Comments |
|---|---|---|
1.0 |
01-Oct-2026
|
Initial Release |