Hello all,
I am trying to blacklist some of the apps below. It doesn't matter what I do, the apps continue to get deployed to our QA search head. I had already checked whether these apps are being being deployed there via any other server class and they are not. According to the docs, the blacklists below should work, right? I tried different ways of blacklisting them with no success... I would greatly appreciate any help. Thank you.
[serverClass:all_gensearch]
whitelist.0 = spkprtsrch01*|spkqatsrch*
restartSplunkd = false
issueReload = true
[serverClass:all_gensearch:app:SA-ldapsearch]
[serverClass:all_gensearch:app:splunk_app_windows_infrastructure]
[serverClass:all_gensearch:app:Splunk_TA_microsoft_ad]
[serverClass:all_gensearch:app:Splunk_TA_microsoft_dns]
[serverClass:all_gensearch:app:TA-maclookup]
[serverClass:all_gensearch:app:TA-user-agents]
[serverClass:all_gensearch:app:TA_cisco_cdr
[serverClass:all_gensearch:app:Splunk_TA_nginx]
blacklist.0 = spkqatsrch*
[serverClass:all_gensearch:app:SA-nix]
restartSplunkd = false
[serverClass:all_gensearch:app:splunk_app_jenkins]
blacklist.0 = spkqatsrch*
[serverClass:all_gensearch:app:NetSkopeAppForSplunk]
blacklist.0 = spkqatsrch*
[serverClass:all_gensearch:app:TA-Zscaler_CIM]
blacklist.0 = spkqatsrch*
[serverClass:all_gensearch:app:duo_splunkapp]
blacklist.0 = spkqatsrch*
[serverClass:all_gensearch:app:zscalersplunkapp]
blacklist.0 = spkqatsrch*
[serverClass:all_gensearch:app:TA-Zscaler_CIM]
blacklist.0 = spkqatsrch*
[serverClass:all_gensearch:app:GSuiteForSplunk]
blacklist.0 = spkqatsrch*
↧