Manage App objects

Manage App objects

When an App is created by a Splunk user, a collection of objects is created that make up the App. These objects can include views, commands, navigation items, event types, saved searches, reports, and more. Each of these objects have permissions associated with them to determine who can view or alter them. By default, the admin user has permissions to alter all the objects in the Splunk system.

• For an overview of Apps, refer to "What's an App?" in this manual.
• For more information about App permissions, refer to "App architecture and object ownership" in this manual.
• To learn more about how to create your own Apps, refer to the Developer Manual.

Manage App objects in Manager

To see and control the objects for all the Apps on your your system, use Splunk Manager in Splunk Web.

• View and manipulate the objects on every page using the sorting arrows
• Filter the view to see only the objects from a given App, owned by a particular user, or that contain a certain string using the App context bar:

Search for App objects

Use the Search field on the App context bar to search for strings in any field. Wildcards are supported. Splunk searches for the string you enter in all available fields by default. To search a particular field, specify that field.

View App objects

You can use Manager to view the App objects in your Splunk deployment in the following ways:

• To see all the objects for all the Apps on your system at once: Manager > All configurations.
• To see all the saved searches and report objects: Manager > Saved searches and reports.
• To see all the event types: Manager > Event types.
• To see all the field extractions: Manager > Field extractions.
• To see all the Python search command scripts: Manager > Search commands.

Note: For information about the individual search commands on the Search command page, refer to the Search Reference Manual.