Splunk Cloud Platform

How to install add-on from file to Splunk Cloud free trial?

khanoh
New Member

Screen Shot 2022-10-31 at 12.26.03 PM.png

 Hi! I have a tgz-file with Splunk add-on developed by my coworkers. I created a trial instance of Splunk Cloud and would like to install (upload) this add-on from the file with the intention to make some modifications for my POC. Unfortunately, I can't locate a place to install or upload a new add-on (see the screenshot in attachment). Please help me find it. 

0 Karma

khanoh
New Member

I don't see Upload Apps, like mentioned here (see the screenshot above) 

I'm curious. Is it because (1) I have a trial version and it's not possible, or (2) it's hidden somewhere? If it's (2), then I'd appreciate the instructions.

Also, I'm curious in order to run validation via curl, you need to get the token. However, when I run this

curl --user my_name:my_password -X GET https://prd-p-j8pfr.splunkcloud.com/2.0/rest/login/splunk  

I receive this

<!doctype html><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"><meta http-equiv="refresh" content="1;url=https://prd-p-j8pfr.splunkcloud.com/en-US/2.0/rest/login/splunk"><title>303 See Other</title></head><body><h1>See Other</h1><p>The resource has moved temporarily <a href="https://prd-p-j8pfr.splunkcloud.com/en-US/2.0/rest/login/splunk">here</a>.</p></body></html>

What do I do wrong? What is your request to get the token and run the validation?

0 Karma

khanoh
New Member

I did validate using aplunk-appinspect cli but what should I click to upload the package and the validation results? I don't see anything in the Splunk Cloud UI.

khanoh@COH-RJVXQJPQL9 ~ % splunk-appinspect inspect /Users/khanoh/Downloads/TA-coh-splunk-add-on_1_0_0_export.tgz

 

0 Karma

johnhuang
Motivator

I'm not sure if there are other ways, but I've only used CURL to submit an package for cloud vetting.

https://dev.splunk.com/enterprise/docs/releaseapps/cloudvetting

0 Karma

johnhuang
Motivator

You have to have the app validated before it can be installed on Splunk Cloud. 

https://dev.splunk.com/enterprise/docs/releaseapps/cloudvetting

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...