Does anyone have splunk file structure diagram

[vrmandadi]

Do anyone of you have Splunk directories and file structure diagram with paths to config files similar to the one on the below link

http://dev.splunk.com/view/dev-guide/SP-CAAAE29

[mroman_splunk]

Actually, that link may have the diagram you are looking for. I have attached the specific image that I think will be helpful. If you look at bottom portion of the image that starts at $SPLUNK_HOME you can see the file paths to particular apps through the $SPLUNK_HOME/etc/apps path. Each of those apps will have a structure that is similar to the orange and green "$APP_HOME" diagram at the top of the attached picture where you will be able to edit your configuration files for a specific app (in the local directory which is at the right of the diagram).

It is important to remember the precedence of configuration files whenever making changes to them. Below is a link that explains configuration file precedence and a list of both Global configuration files and App/User specific configuration files.

http://docs.splunk.com/Documentation/Splunk/6.5.3/Admin/Wheretofindtheconfigurationfiles

[Anonymous]

This is very good.
Thank you @mroman

[carlasteenkamp]

This helped a lot! thank you!!

[lorezyra]

Are TAs installed in the same place as Apps? Correct me if wrong, but shouldn't Add-Ons be installed on the indexers and Apps on the Search Heads in a clustered environment?

[isoutamo]

As usually it depends. If those apps have any views/dashboards then those are installed on sh layer. Usually “apps” (aka TAs) w/o views are installed mainly on heavy forwarded (some time UF or IDX), but I think that there are also times when those are also installed on sh-layer too (e.g. fields definitions),

[viewsmart]

My thoughts are that you should read the app/add-on description. The developer must have mentioned how and were to install the app/add-on.

[niketn]

@vrmandadi... Same page has another detailed diagram.

If you want to create a Splunk App you can refer to the following as well: http://dev.splunk.com/view/webframework-developapps/SP-CAAAEUC