Knowledge Management

Sharing global in config

sloshburch
Splunk Employee
Splunk Employee

This should be an easy one:

From a config file perspective, how do I define an app's knowledge object (a savedsearch for example) as being shared globally?

Thus far, I have been unable to find them in the local.meta and viewstates.conf

1 Solution

somesoni2
Revered Legend

In local.meta file, for each knowledge objects, there is a property called "export" which defines the sharing permission for the object.

export = none - Sharing permission is "This App"/"private"
export = system - sharing permission is "All Apps" or Global

So, export = system is what you're looking for.

View solution in original post

somesoni2
Revered Legend

In local.meta file, for each knowledge objects, there is a property called "export" which defines the sharing permission for the object.

export = none - Sharing permission is "This App"/"private"
export = system - sharing permission is "All Apps" or Global

So, export = system is what you're looking for.

somesoni2
Revered Legend

Great... if this solved your problem, please close the question by accepting the answer.

0 Karma

sloshburch
Splunk Employee
Splunk Employee

I see it now. I don't know why when I was searching the export field I didn't see it - thanks!

0 Karma
Get Updates on the Splunk Community!

Fueling your curiosity with new Splunk ILT and eLearning courses

At Splunk Education, we’re driven by curiosity—both ours and yours! That’s why we’re committed to delivering ...

Splunk AI Assistant for SPL 1.1.0 | Now Personalized to Your Environment for Greater ...

Splunk AI Assistant for SPL has transformed how users interact with Splunk, making it easier than ever to ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureOn Demand Now Step boldly into the AI revolution with enhanced security ...