---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/pt-BR/security-management

 Release :

    - australia

ft:locale :

    - pt-BR

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Copy Splunk profiles

# Copy Splunk Enterprise Event Ingestion profiles from one instance to another
using export/import functionality {#ariaid-title1}

* Versão de lançamento: Australia
* 
* Atualizado 12 de mar. de 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 min. de leitura

You can export and import Splunk Enterprise Event Ingestion profiles
settings from one ServiceNow AI Platform instance to a different ServiceNow AI Platform
instance.

## Antes de Iniciar

Role required: sn_si.ingestion_profile_admin  
Nota:  
Users with the sn_si.admin role can perform all operations available to a profile admin, as the sn_si.admin role inherits the required permissions by default.

## Por Que e Quando Desempenhar Esta Tarefa

This functionality allows the security administrator to copy profiles that have been
tested and verified on one ServiceNow AI Platform instance, for example on
non-production, to another ServiceNow AI Platform instance, for example production,
without the need to redo all configuration settings. The settings that are exported
and imported include profile name, correlation rules, mappings, filters, aggregation
criteria, field translations, fetched sample data, scheduling, and configuration
tile source information.  
Nota:  
When you export a manual event forwarding profile type, the attachment data used for the sample field mapping is copied, however, the attachment file itself is not exported.

## Procedimento

1. Navigate to AllSplunk IntegrationSplunk Event Profiles.
2. Select a profile that you want to export to another ServiceNow AI Platform instance.  
   You can select multiple profiles for export.
3. From the Actions menu, click Export.
4. Once the export complete message appears, click Download.  
   The following illustration shows exporting a Splunk profile (Manual Profile 2) from your ServiceNow AI Platform instance (psand.service-now.com).  
   The exported payload.xml file is downloaded on your computer. The file
   contains the profile name, correlation rules, mappings, filters, aggregation
   criteria, field translations, fetched sample data, scheduling, and
   configuration tile source information. When you select and download multiple
   profiles, they appear in the same payload.xml file.

   You can now proceed to import the profile in another ServiceNow AI Platform
   instance.
5. Navigate to Splunk IntegrationSplunk Event Profiles.
6. Click Import.
7. Click Choose file and select the xml file on your computer.
8. Click Upload.
9. Click Close and Reload Profiles.  
   The following illustration shows importing a Splunk profile (Manual Profile 2) from the ServiceNow AI Platform instance (psand.service-now.com) to another ServiceNow AI Platform instance (ppsand.service-now.com).

   You have successfully imported the profile from another ServiceNow AI Platform instance.

   Verify that the exported Source (Splunk API account and Splunk server URL) and
   MID Server configuration settings are valid and available in imported ServiceNow AI Platform instance. Update your Splunk Enterprise Event Ingestion configuration if
   required.
10. **Opcional:** Verify the MID Server settings after your import a profile.
11. **Opcional:** Navigate to Security OperationsIntegration Configurations.
12. **Opcional:** Select the Splunk Enterprise Event Ingestion configuration tile, and click Update.
13. **Opcional:** Review and update the Source and MID Server details as required.
{#export-and-import-splunk-event-profile-data__steps_h3t_dly_5pb}