When you configure a service template, there is an option that you can configure to consume entity rules from the CSV import during service creation. You should enable that during the service template creation/update. When you're importing services automatically, try to create the appropriate entity rule for that service. ... View more

Are you looking to not only importing new entities as it shows up on the index, but also removing unused entities from the ITSI entity store? Currently, ITSI does not provide a native way to remove unused entities from the entity store, but the development team is looking into a mechanism to make the removal of unused entities a bit easier to manage. Yes, you can use rest endpoints to develop an entity clean up script to do so. ... View more

When you're creating services via service template from a csv file, you can define an entity_rule column in the csv file and let ITSI populates the different entity rules per service. But this would require you to configure the entity rule in the service template in such a way that the entity rules from the csv file are used during the service creation. You can refer to the following page for service template configuration: https://docs.splunk.com/Documentation/ITSI/4.3.1/Configure/CreateServicetemplate ... View more

Looks to me this is a Splunk environment related issue, and it is pointing to the Splunk rest endoints. Do you see similar error/warning messages from other rest calls? ... View more

What ITSI version is this? ... View more