topic Re: Using a command from another application in Security

Using a command from another application

szabados — Mon, 06 Mar 2017 12:25:18 GMT

I have a command defined in an application provided by a vendor, which I would like to use in another application installed in Splunk, as a workflow action.
I've tried invoking the same command from an inline search, but I'm getting an "Unknown search command" error.

In the application where the command is defined, I've already set the permissions the command to be globally available for everyone:

[]
access = read : [ * ], write : [ admin, power, splunk-system-user ]
export = system
[commands]
export = system

What else do I need to set to make this available ?

Re: Using a command from another application

lguinn2 — Mon, 06 Mar 2017 20:04:00 GMT

When you say "an application provided by a vendor," do you mean a Splunk App, installed in $SPLUNK_HOME/etc/apps? Or are you talking about a completely different product?

Re: Using a command from another application

szabados — Tue, 07 Mar 2017 09:42:56 GMT

Yes, sorry for being confusing. It's an app downloaded from Splunkbase

Re: Using a command from another application

woodcock — Sat, 25 Mar 2017 09:52:52 GMT

Did you put this in $SPLUNK_HOME/etc/apps/VeNdOrApPnAmEhErE/metadata/local.meta? You may need to _bump your Search Head (or even debug/refresh).