Splunk ITSI

move itsi build across environments

damickel
Explorer

We have a large team of admins and users that will be using our ITSI instance. Part of our build is to move configuration from our dev environment to production. With Splunk enterprise we are used to managing everything through conf files, but it looks like we have to do it through kv stores with ITSI.

Is there another way to manage services and services templates without using the backup and restore process?

Labels (3)
0 Karma
1 Solution

cdemir
Explorer

You can extract all of the required via API from your dev instance and then post for creation into your prod instance. We don’t do this often in our environment but have with some degree of success. The itsi api documentation and schema are well documented for 4.X branches.

View solution in original post

0 Karma

cdemir
Explorer

You can extract all of the required via API from your dev instance and then post for creation into your prod instance. We don’t do this often in our environment but have with some degree of success. The itsi api documentation and schema are well documented for 4.X branches.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...