Dashboards & Visualizations

How to resolve dashboards from my development environment that are not being updated in my production envrironment's app?

aniello_cerrato
Path Finder

Hi,

I have deployed a new app on my production environment and I am using it.

Now in development environment, I have changed some dashboards and I have to deployed it to the production environment.

I have executed the following steps:

  • Generate .spl file in development environment in the following way ./splunk.exe package app <app_name>
  • Run the command below to update app in production environment ./splunk install app <spl file produced in the step previous> -update 1 -auth admin:password

The new dashboards are added but the dashboards present in the app are not updated.

Please let me know the best way to do this.

Thanks,
Aniello

0 Karma
1 Solution

alacercogitatus
SplunkTrust
SplunkTrust

When you use the package command, Splunk automatically moves anything in local into default. When you install that package onto a different environment, and don't take steps to clean the local folder in production, then any dashboards present in local in production will not change, as they take precedence over the files in default.

Check your local folder in production, and backup and remove any dashboards you find in that app.

View solution in original post

0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

When you use the package command, Splunk automatically moves anything in local into default. When you install that package onto a different environment, and don't take steps to clean the local folder in production, then any dashboards present in local in production will not change, as they take precedence over the files in default.

Check your local folder in production, and backup and remove any dashboards you find in that app.

0 Karma

aniello_cerrato
Path Finder

I add that all dashboards are updated, there is only one dashboard that has been updated only in default folder and not in local.

But the problem is that only this dashboard in Prod env is present in this folder (local), the other are present in default folder. Why?

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...