Knowledge Management

Make tags public

kmcconnell
Path Finder

I could see where this question was asked a couple of times in 2011, but I'm wondering if anything has changed since then to make this easier. I'd like to be able to create a tags.conf file in my app, but make these tags available to everyone. Seems like Splunk could just set a boolean value to mark it global.

[sourcetype=xxxx]
global = 1
needed_tag = enabled

Tags (2)
0 Karma
1 Solution

Ayn
Legend

Oh but you can! It's defined in the default.meta file in an app's metadata directory. See more information here: http://docs.splunk.com/Documentation/Splunk/6.0/AdvancedDev/SetPermissions

And here for the spec: http://docs.splunk.com/Documentation/Splunk/latest/Admin/Defaultmetaconf

View solution in original post

Ayn
Legend

Oh but you can! It's defined in the default.meta file in an app's metadata directory. See more information here: http://docs.splunk.com/Documentation/Splunk/6.0/AdvancedDev/SetPermissions

And here for the spec: http://docs.splunk.com/Documentation/Splunk/latest/Admin/Defaultmetaconf

Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...