Splunk ITSI

Copying ITSI Service Template from one instance (TEST) to another Instance(PROD)

saravanaa83
New Member

Hi

I created ITSI service template in the TEST environment.
I am trying to copy the service template from TEST to PROD.

For that, I have checked in "itsi_service_template.conf", but it is not present in the file of all ITSI Modules(ITSI, SA-ITOA..etc).

Please guide me where I can get the details to copy service template from TEST to PROD

0 Karma

aromanauskas
Path Finder

The service templates are stored in 2 locations. There will be a .conf under the module that you created the service template of /opt/splunk/etc/apps/{DA-Module}/default/itsi_service_template.conf AND there will be configuration in the KVSTORE. This is NOT a simple task to extract from the kvstore and re-import to the prod kvstore. If this is not the template of all templates that took days / weeks to develop I really would suggest you just stare and compare a new one in prod. Otherwise DEV needs to be IDENTICAL to prod or you'll be editing JSON files by hand.

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...