All Apps and Add-ons

Extracting Searches From Apps

amortiz
Explorer

I have a whale of a time getting Splunk apps approved to use with Splunk. Is there a way to look through the splunk apps that are on the site and pull out some of the scripts and searches?

Don't know the copyright/copyleft of the apps but I've read through the documentation of the *nix app and it would be quicker or me to use parts I need rather than go through our approval process.
Thanks,
Al

0 Karma
1 Solution

alacercogitatus
SplunkTrust
SplunkTrust

The App once downloaded is a tarball (tar.gz) renamed as an SPL. Download it, rename it, unzip and untar it, and then you can see the files. You don't have to install into Splunk to see the items, but everything will have to be done in text files instead of the GUI. I would recommend reading the license to make sure you are allowed to "borrow" parts of the searches and dashboards.

View solution in original post

alacercogitatus
SplunkTrust
SplunkTrust

The App once downloaded is a tarball (tar.gz) renamed as an SPL. Download it, rename it, unzip and untar it, and then you can see the files. You don't have to install into Splunk to see the items, but everything will have to be done in text files instead of the GUI. I would recommend reading the license to make sure you are allowed to "borrow" parts of the searches and dashboards.

Get Updates on the Splunk Community!

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...

Ready, Set, SOAR: How Utility Apps Can Up Level Your Playbooks!

 WATCH NOW Powering your capabilities has never been so easy with ready-made Splunk® SOAR Utility Apps. Parse ...