Splunk Dev

Are baseline configurations posted online?

adamsmith47
Communicator

We had Splunk professional services or a few weeks ago to assist with standing up a new deployment. At the start of the week, they provided a collection of apps, a "baseline configuration", to be customized and distributed to the proper areas throughout our environment.

Are these baseline configurations available to download somewhere?

0 Karma

cmerriman
Super Champion

If your PS was telling you to install apps, I’m sure it was in reference to those available at splunkbase.splunk.com which houses all sorts of apps that both Splunk and individuals have created.

adamsmith47
Communicator

No.

It was a collection of app folders which any installation could start with, customize, then distribute to the appropriate instances.

Examples:
_search_base would be deployed to all search heads, to config things like search peers.

_auth_base would be deployed to all instances to config things like LDAP settings.

I'm looking for this collection of apps, before they're customized. They have names like _search_base, _cluster_master_base,_multisite_base, etc... with replaced with your own organization label.

I can reach out to my PS guy if I have to. I just figured these packages were available somewhere.

Thanks.

0 Karma

adamsmith47
Communicator

Reposting my last post, 'cause some characters disappeared...

No.

It was a collection of app folders
which any installation could start
with, customize, then distribute to
the appropriate instances.

Examples:
ORG_search_base would be deployed to all search heads, to config things like
search peers.

ORG_auth_base would be deployed to all instances to config things like LDAP
settings.

I'm looking for this collection of
apps, before they're customized. They
have names like ORG_search_base,
ORG_cluster_master_base,ORG_multisite_base, etc... with ORG replaced with your own
organization label.

I can reach out to my PS guy if I have
to. I just figured these packages were
available somewhere.

Thanks.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...

Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...

Financial services organizations face an impossible equation: maintain 99.9% uptime for mission-critical ...

Customer success is front and center at .conf25

Hi Splunkers, If you are not able to be at .conf25 in person, you can still learn about all the latest news ...