Splunk Dev

local.meta stanzas

goelt2000
Explorer

What does is the logic behind below stanzas under

 

splunk/etc/apps/customappname/metadata/local.meta

[app/ui]

version=7.3.7

modtime=epoch time

 

[app/launcher]

version=7.3.7

modtime=epoch time

 

What is it referring to ? and I suppose these settings are app local only and will not be exported globally since there is no 

export=system here?

 

Thanks

Labels (1)
0 Karma

manjunathmeti
Champion

These are app UI and launcher page permissions specific to the app where local.meta exists (customappname in this case). You don't need to export them globally.

If this reply helps you, an upvote/like would be appreciated.

goelt2000
Explorer

Thanks. Sorry, not sure I understand.

Is there any documentation on the same?

The only documentation on meta files is 

https://docs.splunk.com/Documentation/Splunk/8.1.2/Admin/Defaultmetaconf

 

and it is not useful to understand anything on the meta files. For example: what permissions?

what is the syntax, etc. The documentation on other config files like app.conf is very extensive and clear. 

Can we remove local.meta files? etc..

0 Karma

manjunathmeti
Champion

Check this link for understanding attributes in metadata files:
https://dev.splunk.com/enterprise/docs/developapps/manageknowledge/setpermissionsforobjects/ 

If you are creating app from scratch then you should not include local.meta, all your apps objects permissions should be added in default.meta only.

local.meta file is created when you change permission on Splunk Search heads UI as mentioned in the below documentation.
https://docs.splunk.com/Documentation/Splunk/8.1.2/Knowledge/Manageknowledgeobjectpermissions

 

If this reply helps you, an upvote/like would be appreciated.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...