Splunk Search

List of objects available in metadata

Simon
Contributor

Hi

Is there a list of all known objects on which I can set ACLs which Splunk's metadata files (default.meta/local.meta)?
I'm aware of

  1. views
  2. props
  3. transforms
  4. lookups
  5. viewstates
  6. macros
  7. savedsearches
  8. commands
  9. alert_actions
  10. tags
  11. eventtypes

In concrete, I'm searching for the correct object name to export a eventgen.conf system-wide, so SA-Eventgen is able to fetch it from other apps. And yes, exporting everything system-wide is not an option 😉

Thanks
Simon

Tags (2)

effem
Communicator

Afaik are Manager(Searchapp) and sourcetypes also available.
In order to your concrete question, i can't bring you a safe answer. But try the objecttype "sourcetype" or "eventtype".

greetings effem

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...