Consider moving the pancontentpack.py file to the Add-on

[btorresgil]

This issue comes from a Splunk Answers discussion.

Please provide your feedback on if pancontenpack.py (Sync Metadata from Content Packs) should be in the App or Add-on. It is currently in the App, but updates lookup tables in the Add-on.

[MonkeyKa]

I posted the issue on Splunk Answers and like the idea of it going into the Add-on. The App does not play well with Splunk ES search heads, so the add-on would a better place to maintain the app and vulnerability tables

[crumpetcrusher]

Would like to bump this and request the pantag command also be made available within the Add-on. We do not use the adaptive response action that often, but make heavy use of the pantag command. We also need to remove the App itself from our ES search head cluster as it's already running in our Core infrastructure (duplicate data models) and is more relevant to the networking group than the security group.

I know the import/export system with ES is gone in 5.3, but to me it still makes more sense for the App to contain just the view-related functions, and the Add-on to contain everything else, some of which the App would utilize, some which ES would utilize, etc.