ITSI Foundations • Room 2

Installing ITSI

Before installing ITSI, you must ensure the environment meets all prerequisites: a supported Splunk Enterprise version, adequate hardware resources (CPU, RAM, disk), and the required add-ons such as the IT Essentials Work (ITE Work) app and the SA-ITOA package.

ITSI is installed via the Splunk UI (Manage Apps → Install from File) or via the command line. Post-installation, the KV Store must be running because ITSI stores its configuration data (services, entities, thresholds) in KV Store collections, not in .conf files.

Always verify the KV Store is healthy before and after installation with "splunk show kvstore-status". A broken KV Store means no ITSI functionality.

Knowledge Check

Prove your understanding to clear the room (Rewards XP)

Complete the sentence about where ITSI stores its configuration:

ITSI stores its configuration data (services, KPIs, thresholds) in the Splunk , not in traditional .conf files.