Splunk® Add-on Builder

Splunk Add-on Builder User Guide

This documentation does not apply to the most recent version of Splunk® Add-on Builder. For documentation on the most recent version, go to the latest release.

Modify files directly

For certain situations, you might want to modify your add-on outside of the Add-on Builder by modifying files directly. Follow these guidelines for best results:

  • When modifying configuration files, for example to add stanzas, modify the version in the $SPLUNK_HOME/etc/apps/your_addon/default directory.
  • If you need to add a configuration file, add the file to the $SPLUNK_HOME/etc/apps/your_addon/default directory.
  • Make sure you have sufficient access permissions to any files you place in your add-on directory.
  • Do not place files in the /local directory. Although the Add-on Builder creates copies of the configuration files for your add-ons in its /local directory, this is a working location and files can be overwritten. When packaging an add-on, the Add-on Builder merges any files from your add-on's /default directory with its working copy.


Advanced modifications might affect the add-on's eligibility for Splunk App Certification.

Learn more

For more information, see the following Splunk Enterprise documentation:

Last modified on 13 June, 2022
Create a new data model   Python helper functions

This documentation applies to the following versions of Splunk® Add-on Builder: 4.1.1, 4.1.2, 4.1.3


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters