KSCONF is a command-line tool that helps administrators and developers manage their Splunk environments by enhancing control of their configuration files. The interface is modular so that each function (or subcommand) can be learned quickly and used independently. While most users will probably only use a subset of the total capabilities of this tool, it’s reassuring to have a deep toolbox of power goodies ready to be unleashed at a moments notice. Ksconf works with (and does not replace) your existing Splunk deployment mechanisms and version control tools.
KSCONF is open source and an open development effort. Check us out on GitHub
This Splunk app comes bundled with a CLI tool that helps manage other Splunk apps. While this is not a traditional use case for a Splunk app, it is a very quick and easy way to deploy ksconf.
Why did we make this a Splunk app? Well, while ksconf is technically just a Python package that can be deployed in a variety of ways, we found that the logistics of getting it deployed can be quite difficult due to a packaging issues, legacy cruft, and OS limitations. This approach avoids all that mess.
Full documentation for ksconf and, therefore this app, is hosted at read-the-docs. A full copy of the
ksconf documentation is also included, just like how Splunk ships with a fully copy of the docs in the system/README folder. (And all the air-gapped people rejoice! but sadly, no one could hear them.)
Additional Splunk UI feature are planned, but currently not implemented.
localfolder. (The built-in
restcommand only shows you the final merged view of your settings; and sometimes you have to look deeper.)
See the Install an add-on in Splunk's official documentation. There is one manual step required to active the CLI portion of this app, if you choose to do so. See the Installation docs for more details.
See the full Change log
This release fixes up packaging issues with python package folders that may caused issues after upgrades. Unfortunately, this means everyone who had installed 0.6.x should uninstall and do a fresh install of 0.7.0. Hopefully this issue is resolved and extra steps like this won't be required in the future.
As always, read the full change log here:
Splunk AppInspect evaluates Splunk apps against a set of Splunk-defined criteria to assess the validity and security of an app package and components.
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 50GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps and add-ons from Splunk, our partners and our community. Find an app or add-on for most any data source and user need, or simply create your own with help from our developer portal.