Splunk Dev

How to import an addon with .spl or Splunkbase .tgz to Splunk using Linux?

helpdeskrtvnoor
New Member

Hello,

I am trying to manually import the .spl file of a Splunk addon called 'Windows Event Log Analysis', the file has been provided on the EventID website here: http://www.eventid . net/splunk_addon.asp

I also tried downloading the addon from the Splunkbase, this provides me with a .tgz file that contains quite a bigger amount of files.
This download can be found here: https://splunkbase.splunk.com/app/3067/

My question is, how would I import either of these files into my Splunk installation on Linux (Ubuntu 16.04) ?

The reason I am trying to import the addon manually is that for some reason the Splunk Apps browser refuses my Splunk credentials, when a regular login to the Splunk.com with the same credentials does actually work.

Thank you 🙂

Tags (1)
0 Karma

gmjATredjack
Engager

The answer looks like this (inside a docker container running the free enterprise version)

sudo -u splunk /opt/splunk/bin/splunk install app ./splunk-machine-learning-toolkit_500.tgz -update 1

See

$ splunk help install

niketn
Legend

@helpdeskrtvnoord, if you have downloaded .tgz file you can use Install App From File option to install the App/Add On. Directly browsing to Splunkbase for installation might be blocked at enterprise level. Have you tried Install App from File option?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud's AI Assistant in Action Series: Auditing Compliance and ...

This is the third post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...