Knowledge Management

Run searches on app first install but not on upgrade

DanielFordWA
Contributor

I would like to create an app which when installed will do the following

  • Run a number searches against an already existing index during first install to output data to a summary index or a csv/lookup

  • Create a number of REST Modular inputs and run each one once when the app is first installed.

  • Setup a number of scheduled searches to run at a defined period.

Please can someone advise how I can trigger a search to run during an app first install but not on an upgrade?

Thanks,

Dan

0 Karma
Get Updates on the Splunk Community!

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...

Announcing the Migration of the Splunk Add-on for Microsoft Azure Inputs to ...

Announcing the Migration of the Splunk Add-on for Microsoft Azure Inputs to Officially Supported Splunk ...