topic Re: How to move glass table from Dev environment to Production environment? in Dashboards & Visualizations

How to move glass table from Dev environment to Production environment?

allan_newton — Mon, 19 Mar 2018 17:07:51 GMT

Hi Splunkers,

We have a dev environment with ITSI implementation where we develop dashboards and test them.
Now the tested dashboards are moved to production, currently I have to move a couple of glass tables with respective IDs.

Please help.

Thanks in advance.
Allan N.

Re: How to move glass table from Dev environment to Production environment?

ian_thomas — Mon, 19 Mar 2018 17:25:45 GMT

This won't directly answer your question, but it is another approach to going from dev/test to prod in ITSI. We created a test team and allow people to build out new ITSI knowledge objects/services/kpis there. Then admins can change the team to global for new stuff when it is baked.

Re: How to move glass table from Dev environment to Production environment?

skoelpin — Mon, 19 Mar 2018 17:47:28 GMT

Almost everything in ITSI is saved in the kv-store so backing up your work and moving it to another instance is as easy as taking a backup and applying it to your production environment.

Configure>Backup and Restore>Create a New Backup

https://docs.splunk.com/Documentation/ITSI/3.0.2/Configure/BackupandRestoreITSIconfig

https://answers.splunk.com/answers/614461/how-to-migrate-itsi-dashboards-from-non-prod-to-pr.html#answer-615514

Re: How to move glass table from Dev environment to Production environment?

skoelpin — Mon, 19 Mar 2018 17:57:12 GMT

This can get very dangerous when scaling. In my experience, when allowing anyone to create services, people typically go the easy route and create adhoc searches which run on a 1-5 minute schedule then never look at it again. This can also bog down the rest of the Splunk environment if the indexers are busy handling many ITSI requests. It's important to limit who can create these scheduled searches to preserve CPU

Re: How to move glass table from Dev environment to Production environment?

ian_thomas — Mon, 19 Mar 2018 18:02:41 GMT

Point taken. In this case, it is more about letting people build glass tables, service analyzers etc with existing Services/KPIs. Will keep an eye on new adhoc searches.

Re: How to move glass table from Dev environment to Production environment?

allan_newton — Tue, 20 Mar 2018 02:11:11 GMT

Is it possible to migrate just one glass table?

Re: How to move glass table from Dev environment to Production environment?

ian_thomas — Tue, 29 Sep 2020 18:34:47 GMT

Take a look at the kvstore_to_json.py CLI options... https://docs.splunk.com/Documentation/ITSI/3.0.2/Configure/kvstore_to_json.pyoperations

Re: How to move glass table from Dev environment to Production environment?

skoelpin — Tue, 20 Mar 2018 18:59:28 GMT

Whats the purpose of having 2 independent ITSI search heads? I understand the need for wanting to segregate your development and production environments, but your doubling up the admin work and can use that extra search head to increase your cluster size which can increase the number of concurrent searches. This will be very important later down the road when you increase the number of services and KPI's.

In my opinion, the best solution would be to have a single ITSI environment, create objects privately then promote them in the app view or globally when ready for production.

Re: How to move glass table from Dev environment to Production environment?

allan_newton — Wed, 21 Mar 2018 03:26:08 GMT

Environment is quite huge and the architects choose to keep everything separate. Else no reason! Your thought is quite convincing and logical.

Re: How to move glass table from Dev environment to Production environment?

allan_newton — Wed, 21 Mar 2018 03:26:43 GMT

I'm looking to copy just one glass table.