All Apps and Add-ons

How does version change/upgrade affect Splunk Apps And Add-on configuration file in distributed Environment. ?

pratapbhanu2047
Engager

I am new to splunk and trying to find answer to question. I would really appreciate if you could guide me to good documentation or Link.

Tags (2)
0 Karma
1 Solution

tmarlette
Motivator

In short, everything in /opt/splunk/etc/system/default and if it's an app / add-on, anything in /opt/splunk/etc/apps/<app_name>/default is changed or adjusted. This is the primary reason for making any customizations in the /local directory in either an app, or the CORE component. (This is assuming a non clustered deployment)

if you make changes in a /default directory, they will be overwritten on upgrade.

View solution in original post

tmarlette
Motivator

In short, everything in /opt/splunk/etc/system/default and if it's an app / add-on, anything in /opt/splunk/etc/apps/<app_name>/default is changed or adjusted. This is the primary reason for making any customizations in the /local directory in either an app, or the CORE component. (This is assuming a non clustered deployment)

if you make changes in a /default directory, they will be overwritten on upgrade.

Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...