Getting Data In

I've exported an app to a client, but why were the sourcetypes not exported automatically?

vtsguerrero
Contributor

I've exported an app to a client, but the sourcetypes were not exported automatically. Shouldn't they be inside the app's prop's config?
In total, they are 8 sourcetype now now, but they only exist in my local Splunk server...

Tags (3)
0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

Permissions might be the culprit here. If the sourcetype configurations are in the user folder, then they don't get exported with the app. If they are in the local folder of a different app, then they won't get exported.

Run this to see where it is on your local Splunk server, and then move it to the app where it needs to be.

$SPLUNK_HOME/bin/splunk cmd btool props list --debug

Look for your source type, it will show you where the config is being pulled from.

0 Karma

vtsguerrero
Contributor

When I open the btool.exe it immediately closes, can't run the command...

0 Karma
Get Updates on the Splunk Community!

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars in April. This post ...

Want to Reduce Costs, Mitigate Risk, Improve Performance, or Increase Efficiencies? ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...