topic Re: Can ITSI Maintenance mode be set from a command line as opposed to via the GUI and if so, how? in Splunk ITSI

Can ITSI Maintenance mode be set from a command line as opposed to via the GUI and if so, how?

pat_boyle — Thu, 12 Apr 2018 03:08:14 GMT

I'm lazy and a creature of habit. I do a regular weekly maintenance on our Splunk systems which necessitates setting up a bunch of maintenance windows in ITSI in advance via the GUI.

Is there a way to create an ITSI maintenance window from a command line / rest call - basically so I can set it up in CRON and get another 30 mins in bed?

All I need is to be able to specify:

Which server
A name for the window
A Duration
List of impacted services or entities

Re: Can ITSI Maintenance mode be set from a command line as opposed to via the GUI and if so, how?

jherring_splunk — Tue, 29 Sep 2020 20:48:31 GMT

It seems the REST interface might be a way to automate this:

http://docs.splunk.com/Documentation/ITSI/3.1.4/RESTAPI/ITSIRESTAPIreference#Maintenance_Services_Interface

Re: Can ITSI Maintenance mode be set from a command line as opposed to via the GUI and if so, how?

kartikaykv1 — Wed, 30 Sep 2020 05:25:41 GMT

Use the below CURL to put Entities in Maintenance mode.

Time should be in UTC.
Use _key id for entities.

curl -k -u admin:password https://localhost:8089/servicesNS/nobody/SA-ITOA/maintenance_services_interface/maintenance_calendar -X POST -H "Content-Type:application/json" -d '{"title":"TEST MW","start_time":1589705600,"end_time":1589709600,"objects":[{"object_type":"entity","_key":"52f345bd-9764-4bc1-82a1-040"},{"object_type":"entity","_key":"45de7c5f-0d5f-4d50-9910-a1a"}]}'

Re: Can ITSI Maintenance mode be set from a command line as opposed to via the GUI and if so, how?

nickmew — Fri, 11 Sep 2020 15:12:31 GMT

Slight alteration - I had to add underscores in the start_time, end_time, object_type and _key to get this to work:

curl -k -u username:password https://localhost:8089/servicesNS/nobody/SA-ITOA/maintenance_services_interface/maintenance_calendar -X POST -H "Content-Type:application/json" -d "{\"title\":\"TEST MW\",\"start_time\":1589705600,\"end_time\":1589709600,\"objects\":[{\"object_type\":\"entity\",\"_key\":\"10bc6ede-20f5-45a8-a19f-562ffc425f69\"}]}"