https://community.splunk.com/t5/Splunk-Enterprise/What-are-the-pro-s-amp-Cons-of-connecting-Splunk-Enterprise-amp/m-p/560377#M6481 <P>You are correct.&nbsp; There are a couple of ways to update apps, but all of them require tedious manual clicking.&nbsp; If you update from the Manage Apps page then Splunk does most of the work for you.</P><P>If your REST and programming skills are high enough then you may be able to automate the work.</P> Wed, 21 Jul 2021 17:16:19 GMT richgalloway 2021-07-21T17:16:19Z https://community.splunk.com/t5/Splunk-Enterprise/What-are-the-pro-s-amp-Cons-of-connecting-Splunk-Enterprise-amp/m-p/560360#M6478 <P>Also is it advisable to leave them connected to internet only for short times for for example " Threat list" for Mittre-attack to gets downloaded? I get a lot of errors when updates don't get updated.</P> Wed, 21 Jul 2021 14:32:16 GMT https://community.splunk.com/t5/Splunk-Enterprise/What-are-the-pro-s-amp-Cons-of-connecting-Splunk-Enterprise-amp/m-p/560360#M6478 SamHTexas 2021-07-21T14:32:16Z https://community.splunk.com/t5/Splunk-Enterprise/What-are-the-pro-s-amp-Cons-of-connecting-Splunk-Enterprise-amp/m-p/560371#M6479 <P>If you need Splunk connected to the Internet (and it sounds like you do) then leave it connected.</P><P>Pros: threat feeds arrive; alerts go out; update checking works; app updates work; less noise in the logs</P><P>Cons: "less secure"</P> Wed, 21 Jul 2021 15:57:53 GMT https://community.splunk.com/t5/Splunk-Enterprise/What-are-the-pro-s-amp-Cons-of-connecting-Splunk-Enterprise-amp/m-p/560371#M6479 richgalloway 2021-07-21T15:57:53Z https://community.splunk.com/t5/Splunk-Enterprise/What-are-the-pro-s-amp-Cons-of-connecting-Splunk-Enterprise-amp/m-p/560373#M6480 <P>Thank u again. As far as apps. I have about 80 apps &amp; TAs that needs updating. My understanding is that I need to download the new ones &amp; update the apps one at time. Am I right?</P> Wed, 21 Jul 2021 16:26:10 GMT https://community.splunk.com/t5/Splunk-Enterprise/What-are-the-pro-s-amp-Cons-of-connecting-Splunk-Enterprise-amp/m-p/560373#M6480 SamHTexas 2021-07-21T16:26:10Z https://community.splunk.com/t5/Splunk-Enterprise/What-are-the-pro-s-amp-Cons-of-connecting-Splunk-Enterprise-amp/m-p/560377#M6481 <P>You are correct.&nbsp; There are a couple of ways to update apps, but all of them require tedious manual clicking.&nbsp; If you update from the Manage Apps page then Splunk does most of the work for you.</P><P>If your REST and programming skills are high enough then you may be able to automate the work.</P> Wed, 21 Jul 2021 17:16:19 GMT https://community.splunk.com/t5/Splunk-Enterprise/What-are-the-pro-s-amp-Cons-of-connecting-Splunk-Enterprise-amp/m-p/560377#M6481 richgalloway 2021-07-21T17:16:19Z