Splunk Dev

local.meta stanzas

goelt2000
Explorer

What does is the logic behind below stanzas under

 

splunk/etc/apps/customappname/metadata/local.meta

[app/ui]

version=7.3.7

modtime=epoch time

 

[app/launcher]

version=7.3.7

modtime=epoch time

 

What is it referring to ? and I suppose these settings are app local only and will not be exported globally since there is no 

export=system here?

 

Thanks

Labels (1)
0 Karma

manjunathmeti
Champion

These are app UI and launcher page permissions specific to the app where local.meta exists (customappname in this case). You don't need to export them globally.

If this reply helps you, an upvote/like would be appreciated.

goelt2000
Explorer

Thanks. Sorry, not sure I understand.

Is there any documentation on the same?

The only documentation on meta files is 

https://docs.splunk.com/Documentation/Splunk/8.1.2/Admin/Defaultmetaconf

 

and it is not useful to understand anything on the meta files. For example: what permissions?

what is the syntax, etc. The documentation on other config files like app.conf is very extensive and clear. 

Can we remove local.meta files? etc..

0 Karma

manjunathmeti
Champion

Check this link for understanding attributes in metadata files:
https://dev.splunk.com/enterprise/docs/developapps/manageknowledge/setpermissionsforobjects/ 

If you are creating app from scratch then you should not include local.meta, all your apps objects permissions should be added in default.meta only.

local.meta file is created when you change permission on Splunk Search heads UI as mentioned in the below documentation.
https://docs.splunk.com/Documentation/Splunk/8.1.2/Knowledge/Manageknowledgeobjectpermissions

 

If this reply helps you, an upvote/like would be appreciated.

Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...