Create a full backup of your ITSI environment in case you need to revert the upgrade. For more information, see Create a Full Backup in the Administer Splunk IT Service Intelligence manual.

1. Open ITSI.
2. Select Configuration > KPI Base Searches.
3. Locate each of the KPI Base Searches below so that you can delete them:

   • Business Application::Process

   • Change Requests:Request Approvals_bea65d53

   • Change Requests:Requests Closed_c060aae3

   • Change Requests:Requests Open_acde2997

4. Select Edit > Delete.
5. Select Delete .

1. Verify which ITSI version is compatible with Splunk App for Content Packs in the Compatibility with ITSI and ITE Work table.
2. Download Splunk App for Content Packs v2.0.0 from Splunkbase.
3. Follow the Installation steps at Install the Splunk App for Content Packs to upgrade the Splunk App for Content Packs.

Perform the steps to re-install the content pack for ServiceNow. Make sure to perform the steps below while in Step 5 of the Install the content pack from the Splunk App for Content Packs procedure.

1. Select all the ITSI objects of the content pack Already Installed section in Choose which objects to install.
2. Select the "Replace Existing" parameter in Choose a conflict resolution rule for the objects you install.

1. Open ITSI.
2. Select Configuration > Entity Management .
3. Select Edit > Delete on the following entities

   • SNOW Change Request

   • SNOW Event

   • SNOW Incident