Deployment Architecture

How to package custom app in Default splunk package / executable?

ayush1906
Path Finder

Hi folks,

I have a requirement to add custom app in the default splunk executable.

Currently, we are having splunk .tar setup after which we untar it to install and when splunk service starts we place our custom application in the "etc/apps" folder.

I was thinking is it possible that if I untar the setup file, place my app in the "etc/apps" folder and again zip it. following which I give it for deployment so that it's a one-step.

Is it possible or would it result in some hash mismatch since the original setup is getting tempered with?

Labels (1)
0 Karma

nickhills
Ultra Champion

Is this Splunk Core or Universal Forwarder?
I cant help but think this is not the correct approach, is there a specific reason you can not use a deployment server?

If my comment helps, please give it a thumbs up!
0 Karma

ayush1906
Path Finder

hi nick, we were planning on modifying splunk core package, but we have dropped that plan due to too many unknowns.

0 Karma

ayush1906
Path Finder

splunk enterprise on a Linux server. this installation will act as a search head

0 Karma

nickhills
Ultra Champion

Why cant you use a deployment server?

You can script your install process to automatically add the host to a DS on install, and then use the DS to automatically deploy your custom application. By far and away, this is the better approach.

In my opinion, it is not a sensible choice to "repack" the Splunk provided install with custom code, unless you have a specific use case where alternatives are not available.

If my comment helps, please give it a thumbs up!
Get Updates on the Splunk Community!

Optimize Cloud Monitoring

  TECH TALKS Optimize Cloud Monitoring Tuesday, August 13, 2024  |  11:00AM–12:00PM PST   Register to ...

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...