All Apps and Add-ons

Can you create an App Template from an existing app?

geetaarora01
Engager

When we started implementing Splunk, we created most of the artifacts(KOs, reports, dashboards, etc.) in the default 'Search and reporting" App. When the number of artifacts increased over time, it became difficult to manage. So, all the artifacts created earlier in Search and Reporting app need to be moved into a separate app(s).

Creating all the artifacts again manually, in the new App is tedious and error prone. I figured out hack to manage this situation by using the existing "Search and Reporting" App as a template. I created a template from the existing search app by simply copying the search folder in "$SPLUNK_HOME\etc\apps" to "$SPLUNK_HOME\share\splunk\app_templates".

Now, in the browser, when new App is created the usual way from Apps menu, a new entry named "search" appears in template dropdown. Using this as a template for the new App will bring in all the existing artifacts along.

I would appreciate, if someone in the community can verify this approach.

Thanks in advance,
Geeta

Tags (2)

chimell
Motivator

After testing the practice above , i can conclude that your approach work very well .Except that we have to delete certains views in the new app that has been creating with search and reporting app . This will avoid te duplication.

0 Karma

somesoni2
SplunkTrust
SplunkTrust

This should work fine if you're ok with duplicating most of the objects (some of which may be global) and deleting objects which are not required in the new app.

0 Karma
Get Updates on the Splunk Community!

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...