Is it possible to export ITSI Services?

[theprophet01]

I'm looking to export Service from Splunk ITSI however, there is no direct export feature in the GUI (at least within the Services page). Is there any other way to export ITSI services?

[spavin · Accepted solution]

Hi @theprophet01,

If you have a itoa_admin role,  you can export services, entities, glass tables, KPI searches, templates etc from the following menu:

Configuration > Backup/Restore

1. Click Create Job > Create Backup Job
   
2. Select Partial Backup, give it a name and description, uncheck include conf files, then click next
   
3. Select the services you'd like to backup
   
4. Click Save and Backup
   
5. You will be taken to the Backup/Restore jobs page, where your job will be queued. When it's finished, usually after a few minutes, you can download the backup as a zip. 
   
   
6. Go to the same page on a different Splunk instance to restore it - this time select Restore Job and upload the zip file.

See the capabilities here: https://docs.splunk.com/Documentation/ITSI/4.18.1/Configure/Capabilities

You'll need the ones listed under "Backup/Restore" which by default is only given to itoa_admin.

[theprophet01]

this is perfect, thanks @spavin !