Splunk Dev

How to import an addon with .spl or Splunkbase .tgz to Splunk using Linux?

helpdeskrtvnoor
New Member

Hello,

I am trying to manually import the .spl file of a Splunk addon called 'Windows Event Log Analysis', the file has been provided on the EventID website here: http://www.eventid . net/splunk_addon.asp

I also tried downloading the addon from the Splunkbase, this provides me with a .tgz file that contains quite a bigger amount of files.
This download can be found here: https://splunkbase.splunk.com/app/3067/

My question is, how would I import either of these files into my Splunk installation on Linux (Ubuntu 16.04) ?

The reason I am trying to import the addon manually is that for some reason the Splunk Apps browser refuses my Splunk credentials, when a regular login to the Splunk.com with the same credentials does actually work.

Thank you 🙂

Tags (1)
0 Karma

gmjATredjack
Engager

The answer looks like this (inside a docker container running the free enterprise version)

sudo -u splunk /opt/splunk/bin/splunk install app ./splunk-machine-learning-toolkit_500.tgz -update 1

See

$ splunk help install

niketn
Legend

@helpdeskrtvnoord, if you have downloaded .tgz file you can use Install App From File option to install the App/Add On. Directly browsing to Splunkbase for installation might be blocked at enterprise level. Have you tried Install App from File option?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...