Splunk ITSI

kvstore_to_json.py missing -l option for partial ITSI object restore

amartin6
Path Finder

Using ITSI 4.3.0, attempting to do a partial restore via CLI, referencing https://docs.splunk.com/Documentation/ITSI/4.1.0/Configure/kvstore_to_json.pyoperations#Perform_a_pa...

The kvstore_to_json.py file is missing the -l option that is used to specify the path for the rules file, tried with a one and capital L , but neither of those options are in the file either, also looked/grepped for the word "rule" out of the python file but doesn't exist.

[splunk~]$ bin/splunk cmd python etc/apps/SA-ITOA/bin/kvstore_to_json.py -u admin -p ourpassword -f $SPLUNK_HOME/var/itsi/backups/manualbkps/Aug2 -l etc/apps/SA-ITOA/bin/rules.json -i -d -y -n
Usage: kvstore_to_json.py [options]

kvstore_to_json.py: error: no such option: -l
[splunk~]$

The documentation specifies partial restores can only be done via CLI and not GUI, I went back through the document to version 4.1.0 and its not a new feature, just missing? https://docs.splunk.com/Documentation/ITSI/latest/Configure/BackupandRestoreITSIconfig

0 Karma
1 Solution

amartin6
Path Finder

Feature removed in 4.3:
The old partial backup/restore options from the CLI were removed in ITSI 4.3.0 and was deprecated in 4.2.0.
https://docs.splunk.com/Documentation/ITSI/4.3.0/ReleaseNotes/Removedfeatures

View solution in original post

0 Karma

amartin6
Path Finder

Feature removed in 4.3:
The old partial backup/restore options from the CLI were removed in ITSI 4.3.0 and was deprecated in 4.2.0.
https://docs.splunk.com/Documentation/ITSI/4.3.0/ReleaseNotes/Removedfeatures

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...