Deployment Architecture

Can I specify another location for splunk to look for apps?

brent_weaver
Builder

I am working on automation and I would like to know if there is a way to configure splunk ALSO look to an alt directory (besides /opt/splunk/etc/apps) for configs. Like with the deployment server (which cannot be used btw to deploy) I can sync with the empty dir deployment-apps, therefore not deleting the existing files.

Hopefully this makes sense why I would need to do this!

Thanks.

Tags (1)
0 Karma

acharlieh
Influencer

As @hortonew suggested, what type of automation are you doing here, and what sort of system are you on? I have used symbolic links on *nix before to bring apps into a running Splunk system. But this was also for keeping my development dir outside of the Splunk install directory, and that has "worked" in the past, but I cannot speak as to how supported it would be.

hortonew
Builder

Can you walk through your automation? Is this automation on the universal forwarder level or on a splunk enterprise server? At what point do you need an empty directory for apps?

0 Karma

valiquet
Contributor

Don't write into system if you are in a distributed env. Better use apps. See bellow answer.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...