Splunk SOAR

How to Save an external repository as the default repository?

shanto12
New Member

Is there a way to configure an external repository as the default one. I noticed that when I create a new playbook or modify an existing playbook from another remote repository, it always gets saved into the local repository. How do I change that behaviour to make another repository as the default repository? I am on SOAR on prem 5.1.0.

Labels (1)
0 Karma

phantom_mhike
SplunkTrust
SplunkTrust

There isn't a simple way to do this that I know of. Local is treated differently and the literal repo name "local" seems to be tied directly to both the default and handling the repository as local only. 

You can remove the local repository with some database shenanigans on the scm table. that will remove the default entry and require you to select the repo to store the content in. If you add a remote repo after that with the name local, that repository will then be the default but because it is the "local" named repo, the platform will not execute commands to sync updates made to that repo to the remote repository. You can ssh into the system and run the push commands yourself but that would be a fairly tedious process. 

I think your best option if you really just didnt want the local default would be to remove the local repo and manually select the correct repo every time, but that isn't going to gain you much other than preventing accidental commits to local.

0 Karma
Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Your Voice Matters! Help Us Shape the New Splunk Lantern Experience

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Building Momentum: Splunk Developer Program at .conf25

At Splunk, developers are at the heart of innovation. That’s why this year at .conf25, we officially launched ...