tool · inferred from evidence
AppInspect
A tool that validates Splunk apps, rejecting files with incorrect permissions.
- AppInspect reports failure with splunk-sdk: Some 'search/*' endpoints has been deprecated in Splunk 9.0.1
The check is AppInspect's, not the SDK's, and it passes only for pristine SDK files. Diff your vendored splunklib against the SDK source on GitHub (e.g. `git diff` on the vendored client.py), then replace the whole splunklib directory with
- Incorrect permissions on event_writer.py in splunk-sdk 1.7.2 fail AppInspect
This was fixed in the SDK itself. Upgrade to splunk-sdk 1.7.3 or newer, where event_writer.py ships with the correct 644 permissions like the rest of the package. The fix came in via a community PR that the Splunk maintainers merged, and th