Splunk IT Service Intelligence

How do you install Splunk IT Service Intelligence 4.0 on a search head and connect that search head to the production?

Path Finder


On a new server, we have been asked to install ITSI 4.0 and connect that search head to the production. Our production environment has a search head cluster ITSI.

0 Karma


Hi srampally,

  • The better way is to first add search head member, so that it will sync with other search head cluster members. Refer this document:

  • Here is After that we confirmed that all the members are in cluster using command

    $SPLUNK_HOME/bin/splunk show shcluster-status
    $SPLUNK_HOME/bin/splunk show kvstore-status

  • To confirm if ITSI looked good , login to the new SHC member and navigated to ITSI app and in this App under configuration>Services and here count the ## of services ( i.e this should match with old SHC member)

  • In addition, navigated navigate to Setting>”Search and Report” verify KPI indicators

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!