Separating Splunk app by permission

[wailoont]

Hi Splunk,

I have an app in Splunk (Splunk app for Jenkins), however it is used by another team already, all the indexes needed by the app is also used. We dont want to share the data with other teams.

How can i use the same app, but we can keep the data visibility to our team only.

We dont want to share data with other team, so i am interested to see if we can separate app permission and usage among teams.

[richgalloway]

Apps can only be installed once. Even if they could be installed multiple times the attributes would be merged and you'd end up with something different from what you expect.
You can make a copy of the app using the CLI and then change all of the index references to your index set.

An aside: Splunk is intended to break down silos of information, not reinforce them.