Deployment Architecture

package deployment-app via CLI or rest

dominiquevocat
SplunkTrust
SplunkTrust

Is there a way to package an app in /etc/deployment-apps or /etc/master-apps analog to apps in /etc/apps ?
For apps in /etc/apps there is a est endpoing and a cli parameter allowing it to merge /local and /default and build a .spl for distribution with /opt/splunk/bin/splunk package app appname
I would like to do this also for deployment-apps and master-apps but there seems to be no endpoint on /services/deployment/server/applications/appname that allows something like that.
Could i copy the app to /etc/apps, package and remove it again or is that like a really really bad idea?

0 Karma

risgupta_splunk
Splunk Employee
Splunk Employee
0 Karma

dominiquevocat
SplunkTrust
SplunkTrust

i think this only relates to apps under /etc/apps

0 Karma
Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...