Splunk IT Service Intelligence

Splunk IT Service Intelligence: Why am I getting message 'IT Service Intelligence upgrade has failed' after upgrade to 2.2.0?

thilleso
Path Finder

Hi,

We've updated IT Service Intelligence from 2.1.0 to 2.2.0 according to the documentation (I don't have enough karma points to post links, but using the latest ITSI documentation), and at step 7, a message "IT Service Intelligence upgrade has completed successfully" in Splunk Web should appear. The problem is that we get the message "IT Service Intelligence upgrade has failed".
I've tried restarting Splunk from CLI several times, but always the same message appears.

However, all the new functionality from 2.2 is present, and in the Manage Apps console, ITSI is listed with version 2.2.0. All previously configured services, KPIs, deep-dives and so on are also functioning like normal.

So right now, it seems ITSI has upgraded okey, but Splunk doesn't seem to agree with itself. Have anyone experienced the same issue?

Info about our environment:
- Search Head: Linux CentOS 7, Splunk Enterprise 6.3
- Indexer: Linux CentOS 7, Splunk Enterprise 6.3

Thanks!

0 Karma
1 Solution

thilleso
Path Finder

Update: Found a ITSI python prosess running wild on the server, probably locking down some process used by 2.1.0. After killing it and restarting Splunk, the update successfully message appeared.

View solution in original post

0 Karma

thilleso
Path Finder

Update: Found a ITSI python prosess running wild on the server, probably locking down some process used by 2.1.0. After killing it and restarting Splunk, the update successfully message appeared.

0 Karma
Get Updates on the Splunk Community!

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Dashboard Challenge and Watch the .conf24 Global Broadcast!

The Splunk Community Dashboard Challenge is still happening, and it's not too late to enter for the week of ...