How can automatic update checking be disabled for Splunkbase apps?

[Ellen]

Due to my environment's proxy and firewall setup, we cannot have automatic update checks occurring for Splunkbase apps.

Where and what settings are available to do this?

[aturhano]

Does globally setting allowInternetAccess = false prevent other app to get for example threat feeds from the internet??

[Ellen · Accepted solution]

As of 4.2, SplunkWeb's application management allows the properties of an app to be edit to disable the Splunkbase automatic update checking.

The options available are to set this globally or individually per app.

Globally:

Modify in your local copy of $SPLUNK_HOME/etc/system/local/server.conf with:

[applicationsManagement]
allowInternetAccess = false

Per App:

1) Navigate in SplunkWeb > Manager > Apps > select the Splunkbase apps's "Edit Properties" link and change for "Update checking" from Yes to No

OR

2) In the desired app's $SPLUNK_HOME/etc/apps/ local/app.conf (if this does not exist, create one) and include:

[package]
check_for_updates = 0

for example using the Deployment Monitor app,
$SPLUNK_HOME/etc/apps/SplunkDeploymentMonitor/local/app.conf add the stanza entry

[package]
check_for_updates = 0 

Note: Manual changes to the configuration files will require a Splunk restart.

Additional references for these attribute details can be found in:

$SPLUNK_HOME/etc/system/README/server.conf.spec

$SPLUNK_HOME/etc/system/README/app.conf.spec

Separately if you are interested in disabling the login message that a new Splunk version is available go here:
http://splunk-base.splunk.com/answers/2116/how-can-i-disable-the-login-notification-message-that-a-n...