-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
App-inspect test-failure scenario fixed.
- Loading branch information
1 parent
0ebef3d
commit fb714ab
Showing
10 changed files
with
117 additions
and
3 deletions.
There are no files selected for viewing
Binary file removed
BIN
-8.87 KB
tests/test_app_builds_for_app_inspect/TA-defender-atp-status-check_1_1_0_1.tgz
Binary file not shown.
Binary file not shown.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,78 @@ | ||
# Correct App Inspect Test App | ||
|
||
|
||
OVERVIEW | ||
-------- | ||
Test app for splunk-app-action. | ||
|
||
* Author - Vatsal Jagani | ||
* Creates Index - False | ||
* Compatible with: | ||
* Splunk Enterprise version: 9.0.x, 8.2.x | ||
* OS: Platform Independent | ||
* Browser: Does not have UI. | ||
|
||
|
||
## What's inside the App | ||
|
||
* No of Custom Inputs: **1** | ||
|
||
|
||
|
||
TOPOLOGY AND SETTING UP SPLUNK ENVIRONMENT | ||
------------------------------------------ | ||
There are two ways to setup this app: | ||
1. Standalone Mode: | ||
* Install the `App Inspect Pass`. | ||
2. Distributed Mode: | ||
* The Add-on is required on the Search Head for field extraction. Input configuration is not required on the Search Head. | ||
* Install the `App Inspect Pass` on the universal forwarders on Windows and configure it. (You can do it from the Deployment Server.) | ||
* Install the Add-on on a heavy forwarder if forwarders are sending data to Heavy Forwarder, otherwise install it on Indexers for data parsing. Input configuration is not required for both indexers and heavy forwarders. | ||
|
||
|
||
DEPENDENCIES | ||
------------------------------------------------------------ | ||
* There are no external dependencies for this Add-on. | ||
|
||
|
||
INSTALLATION | ||
------------------------------------------------------------ | ||
* From the Splunk Home page, click the gear icon next to Apps. | ||
* Click `Browse more apps`. | ||
* Search for `App Inspect Pass`. | ||
* Click `Install`. | ||
* If prompted, restart Splunk. | ||
|
||
|
||
DATA COLLECTION & CONFIGURATION | ||
------------------------------------------------------------ | ||
|
||
|
||
|
||
UNINSTALL ADD-ON | ||
------------- | ||
1. SSH to the Splunk instance. | ||
2. Navigate to apps ($SPLUNK_HOME/etc/apps). | ||
3. Remove the `app_inspect_pass` folder from the `apps` directory. | ||
4. Restart Splunk. | ||
|
||
|
||
RELEASE NOTES | ||
------------- | ||
None | ||
|
||
|
||
OPEN SOURCE COMPONENTS AND LICENSES | ||
------------------------------ | ||
* N/A | ||
|
||
|
||
CONTRIBUTORS | ||
------------ | ||
* Vatsal Jagani | ||
|
||
|
||
|
||
SUPPORT | ||
------- | ||
* None |
2 changes: 2 additions & 0 deletions
2
tests/test_app_repos/app_inspect_fail/bin/generate_dummy_logs.ps1
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,2 @@ | ||
Write-Output "This is generating dummy data."; | ||
exit |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,16 @@ | ||
[install] | ||
is_configured = 0 | ||
state = enabled | ||
build = 1 | ||
|
||
[launcher] | ||
author = Vatsal Jagani | ||
version = 1.1.0 | ||
description = App Inspect Fail | ||
|
||
[ui] | ||
is_visible = 0 | ||
label = App Inspect Fail | ||
|
||
[package] | ||
id = app_inspect_fail |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,6 @@ | ||
# Dummy Log Input | ||
[powershell://generate_dummy_logs] | ||
script = . "$SplunkHome\etc\apps\app_inspect_pass\bin\generate_dummy_logs.ps1" | ||
schedule = 0 */6 * * * | ||
sourcetype = DummyLog | ||
disabled = 1 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,6 @@ | ||
###### DummyLog ###### | ||
|
||
[DummyLog] | ||
SHOULD_LINEMERGE = false | ||
DATETIME_CONFIG = NONE | ||
TRUNCATE = 9999 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,8 @@ | ||
|
||
[] | ||
access = read : [ * ], write : [ admin ] | ||
export = system | ||
|
||
[views] | ||
access = read : [ * ], write : [ admin ] | ||
export = none |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,4 +1,3 @@ | ||
# this add-on is powered by splunk Add-on builder | ||
[install] | ||
is_configured = 0 | ||
state = enabled | ||
|