Splunk Enterprise

What is MSICreated app in splunk. how it is created and its use

mala_splunk_91
Explorer

Hi ,

someone please answer on this.

I see "MSICreated" app created on some splunkforwaders. But, I was not there while installing Splunk universal forwarder on those servers.

Want to know , How this App been created and what is the use of it?

Thanks
Mala S

Tags (1)
0 Karma

andrewb_splunk
Splunk Employee
Splunk Employee

The Windows MSI installer creates the MSICreated app during installation. This app provides a context in which to modify the outputs.conf file to determine forwarding behavior. You don't want to modify the outputs.conf in the default directory, and this app gives you a non-default outputs.conf to modify.

This answer is based on what's in the documentation. I don't have any particular knowledge in this area. See http://docs.splunk.com/Documentation/Forwarder/7.1.2/Forwarder/Configureforwardingwithoutputs.conf.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...