Why is the TA-forwarderquery Add-on missing files that are referenced in commands.conf?

[tlmayes]

Does this App actually work "as-is"? Installed in a Search Head cluster environment and then went through the files from the provided tar file. Specifically the file "commands.conf" references 4 python files

---

[forwarderquery]
filename = forwarderquery.py

[forwarderquery2]
filename = forwarderquery2.py

[forwarderconfig]
filename = forwarderconfig.py

[splunkrestlookup]
filename = lookup_splunkrest.py

---

These files do not exist, within the provided downloaded App, within the Search Heads, or within the Universal Forwarders (I assumed that maybe existing Splunk resources were being leveraged).

Am I missing something, or is this app DOA?

See y'all at the conference in Oct.....

[dominiquevocat]

Because i missed out removing the references.
Were you specifically missing them or why do you conclude it does not work?

[dmaislin_splunk]

I assume you are referencing the https://splunkbase.splunk.com/app/2775/ app which is the TA-forwarderquery. I see that in this specific app it contains a forwarderquery.py in the bin directory of this TA.

This App is not created or supported by Splunk, but by someone who is a Splunk app developer, Dominique Vocat . You can reach out to them on the app page for additional support.