Getting Data In

Why am I getting error "App folder name cannot contain spaces or special characters." trying to add an application in Splunk on Windows?

jwalzerpitt
Influencer

I am running Splunk on Windows and when I go to add an application, I am getting an error re: the folder name as the application sits in the following directory - C:\Program Files\Splunk\etc\apps\vtLookup\bin

Encountered the following error while trying to save: In handler 'localapps': App folder name cannot contain spaces or special characters.

I tried using quotes for the directory as in "C:\Program Files\Splunk\etc\apps\vtLookup\bin", but I still get the same error.

How should the folder name be entered?

Thx

0 Karma

sarvan7777
New Member

Well you will just need to provide an arbitrary folder name in the field. I think what you are doing is providing an absolute windows path which is not correct. Once you provide a folder name, splunk in turn will create the folder with necessary configuration files under $SPLUNK_HOME\etc\apps in this case

0 Karma

alice_decker
Engager

It is amazing that nobody could answer this issue. It may be that at the time Keith posted his example, Splunk behaved differently.
However only after I found the source code from Splunk, I could guess is that your and the problem in the example Keith (http://informationonsecurity.blogspot.com/2013/05/splunk-bro-network-security-monitor-and.html ) comes from the source code of local apps.py (https://github.com/edo17/splunk/blob/master/etc/system/bin/localapps.py)
That code suggests that the folder name is in fact appName (lines 39 and 40), which indeed is not allowed to have any slashes or backslashes in the path (appName).
I solved the problem by removing the path and just giving the folder name that would be created under $SPLUNK_HOME/etc/apps (by default the name folder name would be the same as the name of the app.

stephanefotso
Motivator

Please How are you adding the application? Is it via Splunk Web, or Splunk CLI, or simply a copy and paste?

SGF
0 Karma

jwalzerpitt
Influencer

Via Splunk Web (GUI)

0 Karma

stephanefotso
Motivator

Ok. Please help me understand your problem. So you have installed your application using Splunk Web. Can you explain me the way you go to add an application ??

SGF
0 Karma

jwalzerpitt
Influencer

I'm following the steps from this page - http://informationonsecurity.blogspot.com/2013/05/splunk-bro-network-security-monitor-and.html - to create an app for a lookup for Virus Total, and it talks about creating a generic application

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...