Splunk ITSI

Copying ITSI Service Template from one instance (TEST) to another Instance(PROD)

saravanaa83
New Member

Hi

I created ITSI service template in the TEST environment.
I am trying to copy the service template from TEST to PROD.

For that, I have checked in "itsi_service_template.conf", but it is not present in the file of all ITSI Modules(ITSI, SA-ITOA..etc).

Please guide me where I can get the details to copy service template from TEST to PROD

0 Karma

aromanauskas
Path Finder

The service templates are stored in 2 locations. There will be a .conf under the module that you created the service template of /opt/splunk/etc/apps/{DA-Module}/default/itsi_service_template.conf AND there will be configuration in the KVSTORE. This is NOT a simple task to extract from the kvstore and re-import to the prod kvstore. If this is not the template of all templates that took days / weeks to develop I really would suggest you just stare and compare a new one in prod. Otherwise DEV needs to be IDENTICAL to prod or you'll be editing JSON files by hand.

0 Karma
Get Updates on the Splunk Community!

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...

Splunk App Developers | .conf25 Recap & What’s Next

If you stopped by the Builder Bar at .conf25 this year, thank you! The retro tech beer garden vibes were ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...