- Splunk itsi content packs install#
- Splunk itsi content packs upgrade#
- Splunk itsi content packs full#
All other objects such as KPI base searches and saved searches are installed in their original state regardless of which option you choose. This setting only applies to services, correlation searches, and aggregation policies. It's recommended that you import objects as disabled to ensure your environment doesn't break from the addition of new content.
Splunk itsi content packs install#
Select whether to install objects as enabled or to leave them in their original state.
Any changes you previously made to these objects are overwritten.
Replace existing - Existing identical objects are replaced with those from the new installation. Install as new - Objects are installed and any existing identical objects in your environment remain intact. You can selectively choose which objects to install from the new version, or install them all.Ĭhoose a conflict resolution rule for the objects you installįor upgrades or subsequent installs, decide what happens to duplicate objects introduced from the content pack. Review what's included in the content pack and click Proceed.įor a first-time installation, select the items you want to install and deselect any you're not interested in.įor an upgrade, the installer identifies which objects from the content pack are new and which ones already exist in your environment from a previous installation. Select the Shared IT Infrastructure Components content pack. Select Add content packs or Add structure to your data depending on your version of ITSI. From the ITSI main navigation bar, click Configuration > Data Integrations. The Content Pack for Shared IT Infrastructure Components contents are automatically installed and running once you install the Splunk App for Content Packs on the search head where you installed ITSI version 4.9.x.Īfter you install the Splunk App for Content Packs, follow these steps to configure the Content Pack for Shared IT Infrastructure Components: To install the Splunk App for Content Packs in your environment, see the Splunk App for Content Pack installation instructions. To install the Content Pack for Shared IT Infrastructure Components, you must install the Splunk App for Content Packs. Install the content pack from the Splunk App for Content Packs You must choose this option if you are using ITSI version 4.8.x or lower. Your second option is to install the content pack using backup and restore functionality provided by ITSI. The Content Pack for Shared IT Infrastructure Components is included in the Splunk App for Content Packs if you are using ITSI version 4.9.x. One option is to install the content pack from the Splunk App for Content Packs. You have two options for installing and configuring the Content pack for Shared IT Infrastructure Components: Install the Content Pack for Shared IT Infrastructure Components Splunk itsi content packs full#
Take a full backup of your ITSI environment in case you need to uninstall the content pack later.
Splunk itsi content packs upgrade#
See About Splunk ITSI in the Install and Upgrade Manual. Install and configure the IT Service Intelligence (ITSI) in your environment.
Integrate the content pack with existing alerts. Install the Content Pack for Shared IT Infrastructure Components. If you are using ITSI version 4.8.x or lower, then you must install the content pack using backup and restore functionality provided by ITSI.įor a full list of the objects shipped in this content pack, see About the Content Pack for Shared IT Infrastructure Components.įollow these high-level steps to configure the Content Pack for Shared IT Infrastructure Components: The Splunk App for Content Packs includes the Content Pack forShared IT Infrastructure Components provided you are using ITSI version 4.9.0 or higher. The Splunk App for Content Packs allows you to access content packs, preview their contents, and install them in your environment. Install and configure the Content Pack for Shared IT Infrastructure Components
0 kommentar(er)
