Getting Data In

I've exported an app to a client, but why were the sourcetypes not exported automatically?

vtsguerrero
Contributor

I've exported an app to a client, but the sourcetypes were not exported automatically. Shouldn't they be inside the app's prop's config?
In total, they are 8 sourcetype now now, but they only exist in my local Splunk server...

Tags (3)
0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

Permissions might be the culprit here. If the sourcetype configurations are in the user folder, then they don't get exported with the app. If they are in the local folder of a different app, then they won't get exported.

Run this to see where it is on your local Splunk server, and then move it to the app where it needs to be.

$SPLUNK_HOME/bin/splunk cmd btool props list --debug

Look for your source type, it will show you where the config is being pulled from.

0 Karma

vtsguerrero
Contributor

When I open the btool.exe it immediately closes, can't run the command...

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...