I have a command defined in an application provided by a vendor, which I would like to use in another application installed in Splunk, as a workflow action.
I've tried invoking the same command from an inline search, but I'm getting an "Unknown search command" error.
In the application where the command is defined, I've already set the permissions the command to be globally available for everyone:
[]
access = read : [ * ], write : [ admin, power, splunk-system-user ]
export = system
[commands]
export = system
What else do I need to set to make this available ?
Did you put this in $SPLUNK_HOME/etc/apps/VeNdOrApPnAmEhErE/metadata/local.meta
? You may need to _bump
your Search Head (or even debug/refresh
).
When you say "an application provided by a vendor," do you mean a Splunk App, installed in $SPLUNK_HOME/etc/apps? Or are you talking about a completely different product?
Yes, sorry for being confusing. It's an app downloaded from Splunkbase