Backfill without app name

[mwdbhyat]

Hi,

Is it possible to use a backfill script without the need of pointing to an app name?

EG - ./splunk cmd python fill_summary_index.py -app APPNAME -name SEARCHNAME

I want to backfill searches in various apps and not have to point to specific app name.

Thanks

[somesoni2 · Accepted solution]

The splunk needs the app name to locate the savedsearch.conf entry for the searches to backfill, so it would be required.

As a workaround, you can create a wrapper script to get list of folders in $SPLUNK_HOME/etc/apps and loop through each folder name and run your backfill command.