https://community.splunk.com/t5/Security/How-to-share-a-macro-globally-within-the-context-of-my-app/m-p/166413#M4927 <P><span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span> Thanks ... I found it shortly after posting. The settings for people that want to know specifically:</P> <PRE><CODE>[macros/test-macro] export = system owner = nobody version = 6.2.3 modtime = 1439323188.314901000 </CODE></PRE> <P>"test-macro" is the name of the macro. "export" of system is to share it globally.</P> Tue, 11 Aug 2015 21:27:04 GMT ShawnClark 2015-08-11T21:27:04Z https://community.splunk.com/t5/Security/How-to-share-a-macro-globally-within-the-context-of-my-app/m-p/166411#M4925 <P>I have created a macro within an app using the macros.conf file. I am able to see the macro within the Settings -&gt; Advanced Search -&gt; Search Macros if I look under the context of my app. There is an option there under the "Sharing" heading to have it shared globally. What I am trying to figure out is how to set that setting within the macros.conf. I have set it to globally, but I don't see my macros.conf being updated with any additional setting and I don't see any other *.conf file being updated to show that setting. How do I go about setting that property from within the context of my app configuration?</P> Tue, 11 Aug 2015 20:08:19 GMT https://community.splunk.com/t5/Security/How-to-share-a-macro-globally-within-the-context-of-my-app/m-p/166411#M4925 ShawnClark 2015-08-11T20:08:19Z https://community.splunk.com/t5/Security/How-to-share-a-macro-globally-within-the-context-of-my-app/m-p/166412#M4926 <P>The sharing permission is managed in the .meta files. Under your app, you should be seeing the folder called metadata (/etc/apps/YourApp/metadata) containing two files default.meta and local.meta. Any changes to sharing permission would be noted in the local.meta file.</P> Tue, 11 Aug 2015 21:20:38 GMT https://community.splunk.com/t5/Security/How-to-share-a-macro-globally-within-the-context-of-my-app/m-p/166412#M4926 somesoni2 2015-08-11T21:20:38Z https://community.splunk.com/t5/Security/How-to-share-a-macro-globally-within-the-context-of-my-app/m-p/166413#M4927 <P><span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span> Thanks ... I found it shortly after posting. The settings for people that want to know specifically:</P> <PRE><CODE>[macros/test-macro] export = system owner = nobody version = 6.2.3 modtime = 1439323188.314901000 </CODE></PRE> <P>"test-macro" is the name of the macro. "export" of system is to share it globally.</P> Tue, 11 Aug 2015 21:27:04 GMT https://community.splunk.com/t5/Security/How-to-share-a-macro-globally-within-the-context-of-my-app/m-p/166413#M4927 ShawnClark 2015-08-11T21:27:04Z https://community.splunk.com/t5/Security/How-to-share-a-macro-globally-within-the-context-of-my-app/m-p/166414#M4928 <P>Adding to that, export = none is app level sharing (This app). <BR /> For private sharing permissiong, the .meta entries are available in /etc/users/UserName/AppName/metadata/local.meta and there is NO export attribute for private objects.</P> Tue, 11 Aug 2015 21:52:13 GMT https://community.splunk.com/t5/Security/How-to-share-a-macro-globally-within-the-context-of-my-app/m-p/166414#M4928 somesoni2 2015-08-11T21:52:13Z