All Apps and Add-ons

Why is the TA-forwarderquery Add-on missing files that are referenced in commands.conf?

tlmayes
Contributor

Does this App actually work "as-is"? Installed in a Search Head cluster environment and then went through the files from the provided tar file. Specifically the file "commands.conf" references 4 python files


[forwarderquery]
filename = forwarderquery.py

[forwarderquery2]
filename = forwarderquery2.py

[forwarderconfig]
filename = forwarderconfig.py

[splunkrestlookup]
filename = lookup_splunkrest.py

These files do not exist, within the provided downloaded App, within the Search Heads, or within the Universal Forwarders (I assumed that maybe existing Splunk resources were being leveraged).

Am I missing something, or is this app DOA?

See y'all at the conference in Oct.....

0 Karma

dominiquevocat
Motivator

Because i missed out removing the references.
Were you specifically missing them or why do you conclude it does not work?

0 Karma

dmaislin_splunk
Splunk Employee
Splunk Employee

I assume you are referencing the https://splunkbase.splunk.com/app/2775/ app which is the TA-forwarderquery. I see that in this specific app it contains a forwarderquery.py in the bin directory of this TA.

This App is not created or supported by Splunk, but by someone who is a Splunk app developer, Dominique Vocat . You can reach out to them on the app page for additional support.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...