Hello,
I need to create a technology add-on, before so, i started reading the documentation (this: article) they asking me to locate a zip folder called "TA-Template.zip" but I didn't find it. It seems that it's important to get started and i'm running out of time. I'd really appreciate if you can help me.
Thanks in advance,
You're right, the TA-Template.zip doesn't seem to be provided with the PCI app any longer.
When the doc refers to a particular configuration file, you would simply have had an empty one to start with... but those files are just text files.
If you would like a structural template to start with, pull down the Apps dropdown and click on Manage Apps.
Select "Create App"
Name the app according to the other TA's you see:
TA-myspecialdata
Visible = No
Template = barebones
You've now created a folder here: $SPLUNK_HOME/etc/apps/TA-myspecialdata
Take a look at this article in the same documentation:
http://docs.splunk.com/Documentation/PCI/2.1.1/DataSource/GenericExample
This walks you through creating a TA using two existing TA's as example. That might be easier for you to get started.
You're right, the TA-Template.zip doesn't seem to be provided with the PCI app any longer.
When the doc refers to a particular configuration file, you would simply have had an empty one to start with... but those files are just text files.
If you would like a structural template to start with, pull down the Apps dropdown and click on Manage Apps.
Select "Create App"
Name the app according to the other TA's you see:
TA-myspecialdata
Visible = No
Template = barebones
You've now created a folder here: $SPLUNK_HOME/etc/apps/TA-myspecialdata
Take a look at this article in the same documentation:
http://docs.splunk.com/Documentation/PCI/2.1.1/DataSource/GenericExample
This walks you through creating a TA using two existing TA's as example. That might be easier for you to get started.
Thank you my friend I really appreciate your help! I will try it right now. Thanks again and have a nice day!