About paliwalparitosh

paliwalparitosh · ‎02-07-2019

We just moved to cloud. Seems like splunk does not allow third party applications on SplunkCloud. So I guess can't install git on splunkcloud.

paliwalparitosh · ‎02-07-2019

Thank you gjanders. I was able to add new input using GUI which worked as expected. Your suggestion about taking human readable backup is also on point. PS: While adding new input via GUI, it does not allow to use useLocalAuth=true as it gives me an error. I was using local splunk install to test the app. Also, I added following to python scripts to make it work: (as suggested by open issue in github) os.unsetenv('LD_LIBRARY_PATH') My host OS is : Ubuntu 16.04 64-bit Thank you for your help.

paliwalparitosh · ‎02-07-2019

Hi Chris, I am hoping that I could install your app - "Git Version Control for Splunk" on one of the indexers on splunkcloud to take a btool dump and push it to our git repo every n seconds. It does not involve any REST API calls I think. Don't you think it should work if splunkcloud allows me to install git on it? Can you share your views on it?

paliwalparitosh · ‎02-06-2019

My environment has 1 HF which is pushing logs to splunkCloud. I would like to take backup of all savedSearches.conf files in my splunk cloud whenever they are modified. I am aware that splunkcloud limits the REST capabilities to modify config files but I am hoping if I can still use this app in HF to pull config changes from my cloud instance and push it to our git repository for tracing back any changes made to alerts in prod. If I do not care about restoring them via app, I could do it manually via splunk cloud support.

paliwalparitosh · ‎02-05-2019

Can you write - what steps needs to be taken after adding the app to $SPLUNK_HOME/etc/apps folder? I installed "VersionControl For Splunk" App. Added inputs.conf in local directory as well as App.conf and marked it as configured. When I restarted splunk, the app created empty folders (for all splunk apps) in tempGitRepo and initiated git repo as well but not pushing any data to remote repo as well. Also, since folders are empty so they are of no use anyways. PS: I am new to modular inputs.

Posts	5
Solutions	0
Karma Given	8
Karma Received	0
Member Since	‎04-25-2017

Online Status	Offline
Date Last Visited	‎06-05-2020 02:03 AM

Can I use this app (VersionControl for Splunk) to ...

How do I install "VersionControl For Splunk" the a...

Re: Can I use this app (VersionControl for Splunk)...

Re: Can I use this app (VersionControl for Splunk)...

Re: Can I use this app (VersionControl for Splunk)...

Can I use this app (VersionControl for Splunk) to ...

How do I install "VersionControl For Splunk" the a...