Deployment Architecture

Can I specify another location for splunk to look for apps?

brent_weaver
Builder

I am working on automation and I would like to know if there is a way to configure splunk ALSO look to an alt directory (besides /opt/splunk/etc/apps) for configs. Like with the deployment server (which cannot be used btw to deploy) I can sync with the empty dir deployment-apps, therefore not deleting the existing files.

Hopefully this makes sense why I would need to do this!

Thanks.

Tags (1)
0 Karma

acharlieh
Influencer

As @hortonew suggested, what type of automation are you doing here, and what sort of system are you on? I have used symbolic links on *nix before to bring apps into a running Splunk system. But this was also for keeping my development dir outside of the Splunk install directory, and that has "worked" in the past, but I cannot speak as to how supported it would be.

hortonew
Builder

Can you walk through your automation? Is this automation on the universal forwarder level or on a splunk enterprise server? At what point do you need an empty directory for apps?

0 Karma

valiquet
Contributor

Don't write into system if you are in a distributed env. Better use apps. See bellow answer.

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...