All Apps and Add-ons

execute org_all-indexes.spl

Jon_Irish
Explorer

I assume that you execute the org_all_indexes.spl file via manage applications and install from file. I did this, and it now shows up in the applications list, but I don't see any new indexes. What is the proper way to execute the file?

TIA
Jon

0 Karma

jmeager_splunk
Splunk Employee
Splunk Employee

Hi jon,
Late response I admit. I installed the .spl as you indicated and found after following all steps, restarting Splunk and configuring a data input that I now have 12 new indexes created by the org_all_indexes app.

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...