Security

Is it possible to give read only permissions to the Splunk app directory?

Umesh_Vedicsoft
Path Finder

Hi all,

I have developed a sample Splunk application. However, if I give it to anybody, then there is chance to modify js files and conf files by opening the app directory like (SPLUNK_HOME/etc/apps/sample_app). So, I would like to give a read only permission to the app directory structure. Is it possible?

Thanks in advance.

fdi01
Motivator

use 'chmod' command linux to do it.
like this: chmod -R repertoire
in your case : chmod -R 444 SPLUNK_HOME/etc/apps/sample_app

this link can help you : https://doc.ubuntu-fr.org/permissions

0 Karma

Umesh_Vedicsoft
Path Finder

thanks for replaying,but what I would like to do is give the read only permission to the my sample_app directory only that to at windows side.it possible??

0 Karma

richgalloway
SplunkTrust
SplunkTrust

I suggest the account running Splunk should have write access to all directories under SPLUNK_HOME.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability As businesses scale ...