# This file contains possible settings you can use to upload drift detection templates to the KV store.
#
# There is an itsi_drift_detection_template.conf in $SPLUNK_HOME/etc/apps/SA-ITOA/default. To set custom
# configurations, place an itsi_drift_detection_template.conf in $SPLUNK_HOME/etc/apps/SA-ITOA/local.
# You must restart ITSI to enable new configurations.
#
# To learn more about configuration files (including precedence), see the
# documentation located at
# http://docs.splunk.com/Documentation/ITSI/latest/Configure/ListofITSIconfigurationfiles.

[<name>]
title = <string>
* The title of the drift detection template

aggregation_function = <string>

aggregation_span = <string>

lookback_period = <string>

threshold_direction = <string>

tolerance_in_percent = <integer>