Skip to content

httpstergeek/splunk-template-command

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

30 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

splunk-template-command

Introduction

This add-on is intended to be a Search Command Template with the intent of simplifying setup.xml, creating/managing the password store, and using custom config files.

This are created using parts of the JIRA Alert Add-on created by Splunk. You can clone this project.

Using Template

  1. Clone template from Github
  2. Rename splunk-template-command directory to your <newAppName>.
  3. Update app.conf to setting to reflect your app.
    • if you plan on using the credential store for password update the credentials stanza.
  4. For custom config files rename customcommand.conf and customcommand.conf.spec to a relevant name.
    • Update stanza and setting which you plan to using in your app.
  5. Rename customcommand.py to reflect your .
  6. Edit commands.conf replace stanza with the name of your custom command and replace filename settings with what ever you renameed customcommand.py to.
  7. Update restmap.conf the [admin_external:command_install] to [admin_external:<newAppName>_install]
  8. Within <newAppName>.py from setup 5 search and replace customCommand with <newAppName>
    • Replace customCommand with <newAppName> in logging.conf
  9. Within setup.xml
    • edit the endpoint attribute to reflect the change made in step 7.
    • edit the entity attribute to reflect the stanza define in your custom conf file
    • edit all field attribute to reflect the settings defined in your custom conf file
  10. Edit install_endpoint.py to reflect the stanza and setting define in setup.xml and your custom.conf file.

###Adding Python modules Note: PIP is required and all modules should have no archType.

To add edit the setup.sh.

License

The Splunk Add-on for Atlassian JIRA Alerts is licensed under the Apache License 2.0. Details can be found in the LICENSE page.

About

template for Splunk commands using splunk sdk

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published