All Apps and Add-ons

What is the logic behind having [views] stanza in default.meta


In the file $SPLUNK_HOME/etc/apps/TA-aws_guardduty/metadata/default.meta there are [] and [views] stanzas.
The [views] stanza is causing issues with permissions on the dashboards. When you add role permission to the app on the webgui the changes do not effect the dashboards as the [] stanza is what gets updated in the local.meta file but the [views] stanza in the default.meta file takes precedence for the dashboard.
The [views] stanza can be added to the local.meta files manually, but then permissions are not easily managed as using the webgui. If the [views] stanza is commented out in the default.meta file then permissions set in the webgui propagate to the dashboard.

What is the reasoning to having the [views] stanza in the default.meta file?
I don't see it in other apps or the system default.meta
I'm afraid that if the app gets updated, it will overwrite our changes to the default.meta file

0 Karma
Get Updates on the Splunk Community!

SplunkTrust | Where Are They Now - Michael Uschmann

The Background Five years ago, Splunk published several videos showcasing members of the SplunkTrust to share ...

Admin Your Splunk Cloud, Your Way

Join us to maximize different techniques to best tune Splunk Cloud. In this Tech Enablement, you will get ...

Cloud Platform | Discontinuing support for TLS version 1.0 and 1.1

Overview Transport Layer Security (TLS) is a security communications protocol that lets two computers, ...