Splunk ITSI

ITSI Service Template Sync Schedule

ewan000
Path Finder

I have several service templates which are in the status of "Sync Scheduled" I've left them some time with no change.

What trouble shooting steps can I take? ie.

How can I find out when they are scheduled to sync?
How can I force a sync?
How can I see any sync errors? ( think I know this, but for completeness...)
What are the common causes of service templates not syncing promptly?
What is the expected time to wait before they sync?

Labels (2)
0 Karma

ehqtrainorm
Explorer

Hey mate,

 

I can't address your other questions, but I also wondered what the schedule was for syncing service templates.

In SA-ITOA/default/inputs.conf there is a stanza:

[itsi_service_template_update_scheduler://itsi_service_template_update_scheduler]
interval = 900
disabled = 0

 

If you look in SA-ITOA/bin you will find itsi_service_template_update_scheduler.py. This is the modular input script invoked by the scheduled input.

 

You can check the log by running the SPL:

index=_internal source="*itsi_service_template_update_scheduler*"

esnyder_splunk
Splunk Employee
Splunk Employee
How can I find out when they are scheduled to sync?
It should say on either A) services lister (for the linked services that willbe updated) or B) the service template page
 
How can I force a sync?
Is this for if you already had a sync scheduled? If yes, unsure… may need to ask others. If you had not already scheduled it, just change schedule to Now
 
How can I see any sync errors? ( think I know this, but for completeness...)
I beleve the lister pages should indicate if an error occurred during sync. Obviously check the logs, but I cannot remember which specific sources unfortunately
 
What are the common causes of service templates not syncing promptly?
Conflicts or mismatch (services linked not correct somehow…), Maybe there is an issue where a restore/migration is already in effect and lasts a long time so the scheduled sync will wait until those operations are over. . May want to ask around for more
 
 What is the expected time to wait before they sync?
If it’s immediate, it should only be like 5-10s (at most) before you start to see “Sync in progress”. For time of total sync, depends on env, number of services, etc 
0 Karma
Get Updates on the Splunk Community!

Splunk and Fraud

Watch Now!Watch an insightful webinar where we delve into the innovative approaches to solving fraud using the ...

Earn a $35 Gift Card for Answering our Splunk Admins & App Developer Survey

Survey for Splunk Admins and App Developers is open now! | Earn a $35 gift card!      Hello there,  Splunk ...

Continuing Innovation & New Integrations Unlock Full Stack Observability For Your ...

You’ve probably heard the latest about AppDynamics joining the Splunk Observability portfolio, deepening our ...