Splunk Dev

[Splunk Add-on Builder] How to sync account credential configuration in a search head cluster?

Pastea
Engager

Hi,

Is there a way to sync the account configuration created by Splunk Add-on Builder in a Search Head Cluster?

It uses a custom conf <app_name>_account.conf where it save account and username, in passwords.conf it save only account and password. Since the <app_name>_account.conf is not synced among the cluster's members, every new account is added using the interface it is not replicated, and then it is unusable.

What configuration am I missing? Is the only way to edit the replication to whitelist and add the file?

Thanks,
Andrea

Labels (4)

luizlimapg
Path Finder
0 Karma

cameronjust
Path Finder

Old post but I just noticed the addon builder doesn't support config or account changes in a search head cluster environment too.

Did you ever find a solution?

I'm sure I've hand crafted addons that were capable of having config changes replicated across the cluster.

0 Karma
Get Updates on the Splunk Community!

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...

What’s New in Splunk Observability Cloud: January Feature Highlights & Deep Dives

Splunk Observability Cloud continues to evolve, empowering engineering and operations teams with advanced ...