Splunk Dev

Are baseline configurations posted online?

adamsmith47
Communicator

We had Splunk professional services or a few weeks ago to assist with standing up a new deployment. At the start of the week, they provided a collection of apps, a "baseline configuration", to be customized and distributed to the proper areas throughout our environment.

Are these baseline configurations available to download somewhere?

0 Karma

cmerriman
Super Champion

If your PS was telling you to install apps, I’m sure it was in reference to those available at splunkbase.splunk.com which houses all sorts of apps that both Splunk and individuals have created.

adamsmith47
Communicator

No.

It was a collection of app folders which any installation could start with, customize, then distribute to the appropriate instances.

Examples:
_search_base would be deployed to all search heads, to config things like search peers.

_auth_base would be deployed to all instances to config things like LDAP settings.

I'm looking for this collection of apps, before they're customized. They have names like _search_base, _cluster_master_base,_multisite_base, etc... with replaced with your own organization label.

I can reach out to my PS guy if I have to. I just figured these packages were available somewhere.

Thanks.

0 Karma

adamsmith47
Communicator

Reposting my last post, 'cause some characters disappeared...

No.

It was a collection of app folders
which any installation could start
with, customize, then distribute to
the appropriate instances.

Examples:
ORG_search_base would be deployed to all search heads, to config things like
search peers.

ORG_auth_base would be deployed to all instances to config things like LDAP
settings.

I'm looking for this collection of
apps, before they're customized. They
have names like ORG_search_base,
ORG_cluster_master_base,ORG_multisite_base, etc... with ORG replaced with your own
organization label.

I can reach out to my PS guy if I have
to. I just figured these packages were
available somewhere.

Thanks.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Unlock What’s Next: The Splunk Cloud Platform at .conf25

In just a few days, Boston will be buzzing as the Splunk team and thousands of community members come together ...