Working with Apps - Implementing Splunk: Big Data Reporting and Development for Operational Intelligence - page 188

5. Fix the permissions appropriately. In most cases, the permissions you want

will look like this:

You should choose All apps with care. For instance, when building a
lookup, it is common to share the lookup table file and lookup definition
across all apps. This allows the lookup to be used in searches by other
apps. It is less common to share the Automatic lookup, as this can affect
performance in other apps in unforeseen ways.

App directory structure
If you do much beyond building searches and dashboards, sooner or later you will
need to edit files in the filesystem directly. All apps live in $SPLUNK_HOME/etc/
apps/ . On Unix systems, the default installation directory is /opt/splunk . On
Windows, the default installation directory is c:\Program Files\Splunk .
This is the value that $SPLUNK_HOME will inherit on startup.

Stepping through the most common directories, we have:

• appserver : This directory contains files that are served by the Splunk web
app. The files that we uploaded in earlier sections of this chapter are stored
in appserver/static .
• bin : This is where command scripts belong. These scripts are then referenced
in commands.conf . This is also a common location for scripted inputs to live,
though they can live anywhere.