Run searches on app first install but not on upgra...

Knowledge Management

I would like to create an app which when installed will do the following

Run a number searches against an already existing index during first install to output data to a summary index or a csv/lookup
Create a number of REST Modular inputs and run each one once when the app is first installed.
Setup a number of scheduled searches to run at a defined period.

Please can someone advise how I can trigger a search to run during an app first install but not on an upgrade?

Thanks,

Dan

Get Updates on the Splunk Community!

We’ve been buzzing with excitement about the recent validation of Splunk Education! The 2024 Splunk Career ...

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Run searches on app first install but not on upgrade