I could see where this question was asked a couple of times in 2011, but I'm wondering if anything has changed since then to make this easier. I'd like to be able to create a tags.conf file in my app, but make these tags available to everyone. Seems like Splunk could just set a boolean value to mark it global.
[sourcetype=xxxx]
global = 1
needed_tag = enabled
Oh but you can! It's defined in the default.meta
file in an app's metadata
directory. See more information here: http://docs.splunk.com/Documentation/Splunk/6.0/AdvancedDev/SetPermissions
And here for the spec: http://docs.splunk.com/Documentation/Splunk/latest/Admin/Defaultmetaconf
Oh but you can! It's defined in the default.meta
file in an app's metadata
directory. See more information here: http://docs.splunk.com/Documentation/Splunk/6.0/AdvancedDev/SetPermissions
And here for the spec: http://docs.splunk.com/Documentation/Splunk/latest/Admin/Defaultmetaconf