topic Re: How to install add-on from file to Splunk Cloud free trial? in Splunk Cloud Platform

How to install add-on from file to Splunk Cloud free trial?

khanoh — Mon, 31 Oct 2022 19:15:43 GMT

Hi! I have a tgz-file with Splunk add-on developed by my coworkers. I created a trial instance of Splunk Cloud and would like to install (upload) this add-on from the file with the intention to make some modifications for my POC. Unfortunately, I can't locate a place to install or upload a new add-on (see the screenshot in attachment). Please help me find it.

Re: How to install add-on from file to Splunk Cloud free trial

johnhuang — Mon, 31 Oct 2022 18:29:04 GMT

You have to have the app validated before it can be installed on Splunk Cloud.

https://dev.splunk.com/enterprise/docs/releaseapps/cloudvetting

Re: How to install add-on from file to Splunk Cloud free trial?

khanoh — Mon, 31 Oct 2022 19:20:34 GMT

I did validate using aplunk-appinspect cli but what should I click to upload the package and the validation results? I don't see anything in the Splunk Cloud UI.

khanoh@COH-RJVXQJPQL9 ~ % splunk-appinspect inspect /Users/khanoh/Downloads/TA-coh-splunk-add-on_1_0_0_export.tgz

Re: How to install add-on from file to Splunk Cloud free trial?

johnhuang — Mon, 31 Oct 2022 19:32:53 GMT

I'm not sure if there are other ways, but I've only used CURL to submit an package for cloud vetting.

https://dev.splunk.com/enterprise/docs/releaseapps/cloudvetting

Re: How to install add-on from file to Splunk Cloud free trial?

khanoh — Mon, 31 Oct 2022 21:12:29 GMT

I don't see Upload Apps, like mentioned here (see the screenshot above)

I'm curious. Is it because (1) I have a trial version and it's not possible, or (2) it's hidden somewhere? If it's (2), then I'd appreciate the instructions.

Also, I'm curious in order to run validation via curl, you need to get the token. However, when I run this

curl --user my_name:my_password -X GET https://prd-p-j8pfr.splunkcloud.com/2.0/rest/login/splunk

I receive this

<!doctype html><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"><meta http-equiv="refresh" content="1;url=https://prd-p-j8pfr.splunkcloud.com/en-US/2.0/rest/login/splunk"><title>303 See Other</title></head><body><h1>See Other</h1><p>The resource has moved temporarily <a href="https://prd-p-j8pfr.splunkcloud.com/en-US/2.0/rest/login/splunk">here</a>.</p></body></html>

What do I do wrong? What is your request to get the token and run the validation?