Splunk Dev

How to import an addon with .spl or Splunkbase .tgz to Splunk using Linux?

helpdeskrtvnoor
New Member

Hello,

I am trying to manually import the .spl file of a Splunk addon called 'Windows Event Log Analysis', the file has been provided on the EventID website here: http://www.eventid . net/splunk_addon.asp

I also tried downloading the addon from the Splunkbase, this provides me with a .tgz file that contains quite a bigger amount of files.
This download can be found here: https://splunkbase.splunk.com/app/3067/

My question is, how would I import either of these files into my Splunk installation on Linux (Ubuntu 16.04) ?

The reason I am trying to import the addon manually is that for some reason the Splunk Apps browser refuses my Splunk credentials, when a regular login to the Splunk.com with the same credentials does actually work.

Thank you 🙂

Tags (1)
0 Karma

gmjATredjack
Engager

The answer looks like this (inside a docker container running the free enterprise version)

sudo -u splunk /opt/splunk/bin/splunk install app ./splunk-machine-learning-toolkit_500.tgz -update 1

See

$ splunk help install

niketn
Legend

@helpdeskrtvnoord, if you have downloaded .tgz file you can use Install App From File option to install the App/Add On. Directly browsing to Splunkbase for installation might be blocked at enterprise level. Have you tried Install App from File option?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Index This | What did the zero say to the eight?

June 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s ...

Splunk Observability Cloud's AI Assistant in Action Series: Onboarding New Hires & ...

This is the fifth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Now Playing: Splunk Education Summer Learning Premieres

It’s premiere season, and Splunk Education is rolling out new releases you won’t want to miss. Whether you’re ...