Getting Data In

I've exported an app to a client, but why were the sourcetypes not exported automatically?

vtsguerrero
Contributor

I've exported an app to a client, but the sourcetypes were not exported automatically. Shouldn't they be inside the app's prop's config?
In total, they are 8 sourcetype now now, but they only exist in my local Splunk server...

Tags (3)
0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

Permissions might be the culprit here. If the sourcetype configurations are in the user folder, then they don't get exported with the app. If they are in the local folder of a different app, then they won't get exported.

Run this to see where it is on your local Splunk server, and then move it to the app where it needs to be.

$SPLUNK_HOME/bin/splunk cmd btool props list --debug

Look for your source type, it will show you where the config is being pulled from.

0 Karma

vtsguerrero
Contributor

When I open the btool.exe it immediately closes, can't run the command...

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...