Where are Glass tables Tables saved location which were created from Splunk ITSI UI?

[PowerPacked]

Hi Guys

May I know where are Glass tables saved which were created from the Splunk - ITSI UI
& how to transfer them to the other instance?

Thank you

[skoelpin · Accepted solution]

They are saved in the KV store. You can simply take a backup and transfer that backup to another server and your glasstables will reappear!

https://docs.splunk.com/Documentation/ITSI/3.0.1/Configure/BackupandRestoreITSIconfig

[PowerPacked]

Thanks skoelpin

May I know Where the KV Store for ITSI Glass tables is located ?
regarding backup - yes backup thing generates in /var/itsi/backups and can be used to transfer.

[skoelpin]

There's few reasons for wanting direct access to the kv store. You can do the backup and transfer through the Splunk UI safely.

But if your curious, its under /opt/splunk/var/lib/splunk/kvstore/db by default.