Deployment Architecture

How do you set app permissions in a search head cluster?

rmorlen
Splunk Employee
Splunk Employee

How do you set app permissions in a search head cluster? I don't see any permissions options in Manage Apps.

0 Karma
1 Solution

dolivasoh
Contributor

You should first do this on another instance and port your app into your deployer. I personally edit live on the deployer instance and rsync the app over to the deployment apps directory after making a significant change.

Be sure to also maintain the same roles on the search head cluster so everything fits into place. You can deploy authentication.conf and authorize.conf via shcluster app.

View solution in original post

dolivasoh
Contributor

You should first do this on another instance and port your app into your deployer. I personally edit live on the deployer instance and rsync the app over to the deployment apps directory after making a significant change.

Be sure to also maintain the same roles on the search head cluster so everything fits into place. You can deploy authentication.conf and authorize.conf via shcluster app.

splunkreal
Motivator

I've the same problem, is there a clear way to set search app permissions on all search head nodes?

I had to connect on a search head to update search app permissions in manage apps

I've also seen that local.meta has then been updated

Also what are the differences between default.meta and local.meta?

Many thanks!

* If this helps, please upvote or accept solution if it solved *
0 Karma

rmorlen
Splunk Employee
Splunk Employee

I was kind of hoping to avoid that option but looks like I won't have a choice.

Are the settings part of local.meta?

Currently authentication, authorize, and other .confs are deployed to SHC members via an app.

Thanks,

0 Karma
Get Updates on the Splunk Community!

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...