https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-make-URL-Toolbox-available-from-the-Splunk-App-for/m-p/175734#M794 <P>And the answer in the already in the question <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Wed, 24 Jun 2015 21:25:39 GMT mdessus_splunk 2015-06-24T21:25:39Z https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-make-URL-Toolbox-available-from-the-Splunk-App-for/m-p/175733#M793 <P>Since ES filters apps imported by name (TA... ), you need to force the import by modifying the file <STRONG>/opt/splunk/etc/apps/SplunkEnterpriseSecuritySuite/local/inputs.conf</STRONG> and changing the <STRONG>app_regex</STRONG> in the stanza <STRONG>[app_imports_update://update_es]</STRONG>:</P> <PRE><CODE>[app_imports_update://update_es] app_regex = utbox disabled = 0 </CODE></PRE> Mon, 28 Sep 2020 20:22:26 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-make-URL-Toolbox-available-from-the-Splunk-App-for/m-p/175733#M793 mdessus_splunk 2020-09-28T20:22:26Z https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-make-URL-Toolbox-available-from-the-Splunk-App-for/m-p/175734#M794 <P>And the answer in the already in the question <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Wed, 24 Jun 2015 21:25:39 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-make-URL-Toolbox-available-from-the-Splunk-App-for/m-p/175734#M794 mdessus_splunk 2015-06-24T21:25:39Z https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-make-URL-Toolbox-available-from-the-Splunk-App-for/m-p/175735#M795 <P>Note that this seems to cause an issue when upgrading (at least) to ES 4.0. Remove this setting before !<BR /> I'll report this issue.</P> Tue, 27 Oct 2015 22:03:09 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-make-URL-Toolbox-available-from-the-Splunk-App-for/m-p/175735#M795 mdessus_splunk 2015-10-27T22:03:09Z https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-make-URL-Toolbox-available-from-the-Splunk-App-for/m-p/175736#M796 <P>Should be fixed in ES 4.0.1.</P> Wed, 28 Oct 2015 10:30:33 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-make-URL-Toolbox-available-from-the-Splunk-App-for/m-p/175736#M796 mdessus_splunk 2015-10-28T10:30:33Z https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-make-URL-Toolbox-available-from-the-Splunk-App-for/m-p/175737#M797 <P>According to some fellow splunkers, the regex should be more similar to that one:</P> <P><EM>app_regex = ([DST]A-.</EM>)|(Splunk_[DST]A_.<EM>)|(SplunkEnterpriseSecuritySuite)|(utbox)</EM></P> Tue, 29 Sep 2020 07:41:31 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-make-URL-Toolbox-available-from-the-Splunk-App-for/m-p/175737#M797 mdessus_splunk 2020-09-29T07:41:31Z https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-make-URL-Toolbox-available-from-the-Splunk-App-for/m-p/175738#M798 <P>Note that in ES versions 4.7 and later, you can do it from the interface: <A href="http://docs.splunk.com/Documentation/ES/4.7.1/Install/ImportCustomApps">http://docs.splunk.com/Documentation/ES/4.7.1/Install/ImportCustomApps</A></P> Thu, 08 Jun 2017 09:59:30 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-make-URL-Toolbox-available-from-the-Splunk-App-for/m-p/175738#M798 mdessus_splunk 2017-06-08T09:59:30Z