All Apps and Add-ons

I need an Splunk app that can notice changes from Git?

hunterpj
Path Finder

Is there an app that allows you to notice when a app has been altered in github (like from a webhook), and can clone the remote repo into a web environment? I have seen some answers around but haven't seen any that deal with a environment only accessible via URL.
If there is an app that allows Splunk to notice this, that would be great.

Thanks,
hunterpj

0 Karma
1 Solution

gjanders
SplunkTrust
SplunkTrust

gjanders
SplunkTrust
SplunkTrust

Unified Open-Sourced Splunk Configuration Management System ? Recording Slides github link , I also forked it here

hunterpj
Path Finder

Does this work with both Windows and Linux? It doesn't mention it anywhere.

0 Karma

gjanders
SplunkTrust
SplunkTrust

It's python code so it should also work for Windows however there are parts that are normally Unix specific such as using SSH.

You could adapt it to work on a Windows based system but I've never tested that...

0 Karma

hunterpj
Path Finder

Do you know where I can find a fix for an error? The test.py works however I keep running into this error:

ERROR: test_04_look_for_deleted_app (main.Test01BasicAppetiteRun)

Test deletion of apps

Traceback (most recent call last):
File "test.py", line 232, in test_04_look_for_deleted_app
delete_stat = get_entry('"msg": "delete"')['log']
TypeError: 'NoneType' object has no attribute 'getitem'


I will look into it more however I haven't found anything. If you know where I can contact the people who made appetite or some other form of help, that would be greatly appreciated.

Thanks, hunterpj

0 Karma

gjanders
SplunkTrust
SplunkTrust

If you want to run the test.py make sure you clone the original appetite

The test appears to look for a deletion string in the logs which may not be there in my copy...

They do accept bugs on github on their page if you do have an issue, but this is an open source project...

0 Karma

hunterpj
Path Finder

Yeah they aren't answering, but I fixed it. it was because i had a different version of python so the syntax didn't work correctly.

However, I am having another problem. I cannot seem to get Appetite to automatically restart my servers. It says restart = true in the apps.conf, in the deployment method I am using, and even the run_appetite shell. But it still doesn't work. Am I missing something?

Thank you for your help,

hunterpj

0 Karma

gjanders
SplunkTrust
SplunkTrust

I changed my commands.conf to :

# mandatory field
[restart]
cmd: "restart --accept-license --answer-yes --no-prompt"
use_root: false

Because I had issues with the use_root setting (sudo was prompting for a password)

0 Karma
Get Updates on the Splunk Community!

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...

Ready, Set, SOAR: How Utility Apps Can Up Level Your Playbooks!

 WATCH NOW Powering your capabilities has never been so easy with ready-made Splunk® SOAR Utility Apps. Parse ...

DevSecOps: Why You Should Care and How To Get Started

 WATCH NOW In this Tech Talk we will talk about what people mean by DevSecOps and deep dive into the different ...