Splunk ITSI settings import failure message after scheduled maintenance

Available Languages

Updated:October 1, 2026

Document ID:SPLK055068

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Applicability

Splunk IT Service Intelligence

Description

During a scheduled Splunk maintenance window, a banner message appears stating:

Failures occurred while attempting to import some IT Service Intelligence settings from configuration files for apps and modules. Check the logs to get information about which settings failed to be imported.

This message is generated by ITSI's configurator modular input, which imports app settings into the KV store during startup. The error is caused by a transient unavailability of the KV store during system restart, resulting in a json.JSONDecodeError at migration_queue_operation:312 due to an empty response.

Investigation

Confirm the message appears only during the maintenance window and does not persist afterward.
Run the following SPL searches to check for related errors in logs. No further errors is showing.

index=_internal source=*itsi_configurator* ERROR  
index=_internal source=*python_modular_input* component=ITSIImport ERROR  
index=_internal source=*itsi_migration* ERROR

Verify ITSI functionality by confirming that Service Analyzer, Episode Review, KPIs, Glass Tables/Dashboards, and Correlation Searches are operating normally.

Resolution

Recognize that the import failure message is a transient issue caused by KV store unavailability during maintenance restart.
Confirm ITSI services and dashboards are functioning correctly as validation.
If the message does not reappear after maintenance and ITSI operates normally, dismiss the banner notification.
If the message persists or reoccurs outside maintenance windows, investigate logs further to identify specific failed settings.
No further action is required if ITSI environment is stable and no errors persist.