All Apps and Add-ons

How to make search indexes configurable in Add-on panel searches?

joshuapetitt
Path Finder

I am making an add-on that will be installed in a couple of different splunk environments.

The different splunk environments use different index names for the "same" data.

I would like to make my search string somehow configurable, so the index that it searches can be configurable by the end user.

I know there are the $token$ values that can be used in panel search queries. Is it possible to populate the $token$ value from a local .conf file perhaps?

I found a related questions here:

https://answers.splunk.com/answers/221617/retrieving-values-from-config-file.html

UPDATES:

It looks like the setup.xml is what I need to include in my app:

https://docs.splunk.com/Documentation/Splunk/7.0.1/Admin/Setup.xmlconf

0 Karma

lfedak_splunk
Splunk Employee
Splunk Employee

Hey @joshuapetitt, Did the setup.xml resolve your problem?

0 Karma

joshuapetitt
Path Finder

maybe? I am still researching how to properly setup setup.xml 😉 The one portion I'm still not 100% sure on is after I do have a working setup.xml, how I would reference the .conf value in the dashboard panel as a token?

0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...