Hi,
Last week I defined a custom search command, and after reading the documentation I decided that I should reference it in:
$SPLUNK_HOME/etc/app/<app_name>/local
where my <app_name> is search because its a search command. So I created
$SPLUNK_HOME/etc/app/<app_name>/local/commands.conf
and put in a single santza for my command. Saved it, restarted splunk and tested it. After debugging worked great, so did all the normal search commands. Over the thanksgiving weekend my splunk started crashing. I think it unrelated and has todo with some security changes we made to the server, but wanted to double check that I didn't my "guess" about where to put it isn't destroying things. (btw its are still crashing once it remove the new commands.conf and restart so I'm fairly sure its not the problem).
-Tristan