All Apps and Add-ons

What is the default behavior for an app that does not have an app.conf file?

Simeon
Splunk Employee
Splunk Employee

If I have a Splunk App that does not contain an app.conf file, what is the default behavior? I'm trying to figure out if my app is turned on or off.

Tags (1)
1 Solution

the_wolverine
Champion

I think it is important to mention versions here.

In 4.x, we have app.conf

In version 3.x we have the MANIFEST file.

When migrating from 3.x to 4.x there is no app.conf created during migration. Thus, we have the undesired behavior of all apps from version 3.x disabled via MANIFEST file are now enabled after migration to 4.x

View solution in original post

the_wolverine
Champion

I think it is important to mention versions here.

In 4.x, we have app.conf

In version 3.x we have the MANIFEST file.

When migrating from 3.x to 4.x there is no app.conf created during migration. Thus, we have the undesired behavior of all apps from version 3.x disabled via MANIFEST file are now enabled after migration to 4.x

gkanapathy
Splunk Employee
Splunk Employee

sounds like a migration bug.

0 Karma

jrodman
Splunk Employee
Splunk Employee

In keeping with historial behavior, apps with no app.conf anywhere are enabled.

matt
Splunk Employee
Splunk Employee

If you are doing anything that is non-trivial you are going to need this file, since it is what the UI needs for showing labels and configs. Without it I believe it would just be a container of confs. Depending on what you define in your metadata/default.meta it is likely that the confs will not be accessible by other apps so you'll have a hard time taking advantage of anything you put in it.

Get Updates on the Splunk Community!

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...

Reminder! Splunk Love Promo: $25 Visa Gift Card for Your Honest SOAR Review With ...

We recently launched our first Splunk Love Special, and it's gone phenomenally well, so we're doing it again, ...