I've built an app that must use the Splunk eventgen from github as well as the custom eventgen directory I created to house my event.conf and sample file that the eventgen uses. I've tried to tar my app with both the eventgen/ and internal_eventgen/ directories so that they all get installed with the app package, but when I test my .spl file I get an error in Splunk saying "There was an error processing the upload."
Can I do this? If yes, how do I get around this error? Any advice so that the eventgen and related/required eventgen configuration can be included with my .spl package would greatly be appreciated.
TYIA!
Paul
↧