All Apps and Add-ons

TA-Template.zip not found

SalimRahmani
Explorer

Hello,
I need to create a technology add-on, before so, i started reading the documentation (this: article) they asking me to locate a zip folder called "TA-Template.zip" but I didn't find it. It seems that it's important to get started and i'm running out of time. I'd really appreciate if you can help me.

Thanks in advance,

1 Solution

rsennett_splunk
Splunk Employee
Splunk Employee

You're right, the TA-Template.zip doesn't seem to be provided with the PCI app any longer.

When the doc refers to a particular configuration file, you would simply have had an empty one to start with... but those files are just text files.

If you would like a structural template to start with, pull down the Apps dropdown and click on Manage Apps.
Select "Create App"
Name the app according to the other TA's you see:
TA-myspecialdata
Visible = No
Template = barebones

You've now created a folder here: $SPLUNK_HOME/etc/apps/TA-myspecialdata

Take a look at this article in the same documentation:

http://docs.splunk.com/Documentation/PCI/2.1.1/DataSource/GenericExample

This walks you through creating a TA using two existing TA's as example. That might be easier for you to get started.

With Splunk... the answer is always "YES!". It just might require more regex than you're prepared for!

View solution in original post

rsennett_splunk
Splunk Employee
Splunk Employee

You're right, the TA-Template.zip doesn't seem to be provided with the PCI app any longer.

When the doc refers to a particular configuration file, you would simply have had an empty one to start with... but those files are just text files.

If you would like a structural template to start with, pull down the Apps dropdown and click on Manage Apps.
Select "Create App"
Name the app according to the other TA's you see:
TA-myspecialdata
Visible = No
Template = barebones

You've now created a folder here: $SPLUNK_HOME/etc/apps/TA-myspecialdata

Take a look at this article in the same documentation:

http://docs.splunk.com/Documentation/PCI/2.1.1/DataSource/GenericExample

This walks you through creating a TA using two existing TA's as example. That might be easier for you to get started.

With Splunk... the answer is always "YES!". It just might require more regex than you're prepared for!

SalimRahmani
Explorer

Thank you my friend I really appreciate your help! I will try it right now. Thanks again and have a nice day!

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Agent Mode Engaged! Enchaining Agentic Operations with Splunk AI Assistant 2.0

    Are you ready to transform how your team handles complex data requests? We invite you to our upcoming ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...