I have created a custom python script named "sn_sec_util.py" in the bin folder of the splunk app. I want to load this file in the python REST handler "my_submit.py" which is also in the bin folder. But I am facing the issue at the import statement mentioning "ModuleNotFoundError: No module named 'sn_sec_util". Here is the file "my_submit.py" with import statement of the module "sn_sec_util.py" in the line 4. import sys import splunk import logging, logging.handlers import sn_sec_util as snutil from urllib.parse import unquote class Submit(splunk.rest.BaseRestHandler): def handle_submit(self): payload = self.request['payload'] sessionKey = self.sessionKey handle_POST = handle_submit ... View more

I ran the latest Splunk's AppInspect API 2.1.0 using the Postman for the Splunk app we are developing. We have a setup.xml file located inside the default folder of the app project. After running the AppInspect recently, I got an issue "Do not use default/setup.xml in the Cloud environment. Please consider use Authorization Code Flow for server-side web applications that can securely store secrets.". This error was not shown when I ran the app a week before. I guess this rule should be recently introduced in the Splunk AppInspect. Can someone please provide some info on where to place the setup.xml file for this to error to disappear and also work for Splunk Cloud as well? ... View more

I have uploaded a Splunk app to Splunk base. But I cannot see "Splunk Cloud" in the Products section for the App when viewed from the App page. I have ran the Splunk AppInspect - Cloud in the Postman to verify that it worked for the Splunk Cloud as well. It ran successfully without any errors or failures. So what additional steps are needed for the Splunk Cloud to appear in the App page? ... View more

I need entire process for the submission of a Splunk app to Splunk Cloud and what is the duration of these approvals ... View more

From a Splunk custom App, I need to add the workflow action which should be displayed under the Actions menu for the notable event in the Incident Review view in the Splunk Enterprise Security. I have created a workflow action with 'Show Action in' attribute set to 'Event menu' and this workflow action is not visible in the notable event Actions ( in both the search and Incident Review view in the Enterprise Security ) but visible in the search view of the Splunk Enterprise. ... View more