SplunkUDA Beginning Splunk With Docker | Page 41

Beginning Splunk With Docker - Vincent Sesto 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 [props] export = system ### TRANSFORMS [transforms] export = system ### LOOKUPS [lookups] export = system ### VIEWSTATES [viewstates] access = read : [ * ], write : [ * ] export = system This is where we set up some of the permissions of the new app and what users are able to do. 5. We have now set up the shell of our new Splunk App and we can now add the details to our Dockerfile to make sure that our new container build with it. Open the Dockerfile in your text editor and add the next two lines to the bottom of the the file. 11 # Creating a new app 12 COPY mood_radiator/ /opt/splunk/etc/apps/mood_radiator/ We are not doing anything we haven’t done previously. We are simply using the COPY command to add the new directory structure, config and metadata that we have just created. 6. Just as we did earlier, we can run the build Docker command again to build the container with the new features. 41