topic How to assign index of an app to another. in Splunk Search

How to assign index of an app to another.

KarunK — Mon, 28 Sep 2020 10:04:53 GMT

Hi,

I have an app called ngcdn and an index (we_accesslog_extsqu) for that app which is looking to a directory. Now i have created another app (cds) and my search on that app for the index="we_accesslog_extsqu" is not producing any results. From looking at the manager-> indexes, the index "we_accesslog_extsqu" is assigned/owned by ngcdn app.

How do I use the same index for my new app - "cds" ?
OR
How do i make the "we_accesslog_extsqu" index generic so that its is available to all apps ?

Thanks

Re: How to assign index of an app to another.

Takajian — Mon, 28 Sep 2020 10:04:56 GMT

I think the index="we_accesslog_extsqu" is defined in the app ngcdn. Did you share the index to others? From looking at the manager-> app -> sharing permissions is "global"? Your app will need to have global permission to share the configuration to other app.

Re: How to assign index of an app to another.

KarunK — Thu, 10 Nov 2011 23:48:20 GMT

Thanks. It worked.

Re: How to assign index of an app to another.

bhawkins1 — Thu, 29 Sep 2016 13:34:55 GMT

As of splunk 6.5, the option to enable this is written as:

Sharing for config file-only objects

Set permissions for configurations that have been copied over or added to config files rather than created through the UI. Objects defined in config files only (not in the UI) should appear in

(Change the value from this app only (system) to All apps)