All Apps and Add-ons

server class/apps gets updated by deployment server


Hello Splunkers,

Hope Everyone doing good.

I am for spl to create alert whenever a server class/apps gets updated by deployment server?

Could anyone please help ??

0 Karma


start here:
index=_internal component=PackageDownloadRestHandler host=* app=<YourAppNameHere>

or here:
index=_internal sourcetype=splunkd action=install

run in verbose and see how the events look like and write your own logic to answer the questions you care about

hope it helps

0 Karma
Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!