Security

Is it possible to give read only permissions to the Splunk app directory?

Umesh_Vedicsoft
Path Finder

Hi all,

I have developed a sample Splunk application. However, if I give it to anybody, then there is chance to modify js files and conf files by opening the app directory like (SPLUNK_HOME/etc/apps/sample_app). So, I would like to give a read only permission to the app directory structure. Is it possible?

Thanks in advance.

fdi01
Motivator

use 'chmod' command linux to do it.
like this: chmod -R repertoire
in your case : chmod -R 444 SPLUNK_HOME/etc/apps/sample_app

this link can help you : https://doc.ubuntu-fr.org/permissions

0 Karma

Umesh_Vedicsoft
Path Finder

thanks for replaying,but what I would like to do is give the read only permission to the my sample_app directory only that to at windows side.it possible??

0 Karma

richgalloway
SplunkTrust
SplunkTrust

I suggest the account running Splunk should have write access to all directories under SPLUNK_HOME.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...