topic How to uninstall Splunk add-ons without the help of CLI in All Apps and Add-ons

How to uninstall Splunk add-ons without the help of CLI

Nith1 — Tue, 09 Mar 2021 13:42:35 GMT

Hi,

I have installed a Splunk addon for e.g; Github add-on ( https://splunkbase.splunk.com/app/3739/) and its no more supported now for Splunk version 8. Can you please let me know how i can delete this addon completely without using the help of CLI.

From Splunk when i go to Apps--> Manage Apps , I could get an option only to Disable the addon, Edit properties etc.

Could please guide me in uninstalling the addon completely add-on from my Splunk page.

Thanks

Re: How to uninstall Splunk add-ons without the help of CLI

gcusello — Tue, 09 Mar 2021 08:31:00 GMT

Hi @Nith1,

please follow these steps:

access the Splunk installation by operative system (SSH for Linux or RDP for Windows),
go to $SPLUNK_HOME/etc/apps,
delete the app to remove,
restart Splunk on the machine.

Ciao.

Giuseppe

Re: How to uninstall Splunk add-ons without the help of CLI

manjunathmeti — Tue, 09 Mar 2021 08:46:39 GMT

hi @Nith1,

Uninstalling an app/add-on from a standalone instance should be done on CLI to clean up all the related app assets/directories.

But if you don't have access to CLI you can use REST API endpoint to delete the app.

https://SPLUNK_SERVER_IP:8089/services/apps/local/app_directory_name

You can use CURL or postman tool to delete the app.

curl -k -u admin:changeme --request DELETE https://SPLUNK_SERVER_IP:8089/services/apps/local/app_directory_name

If this reply helps you, an upvote/like would be appreciated.

Re: How to uninstall Splunk add-ons without the help of CLI

Nith1 — Tue, 09 Mar 2021 09:47:13 GMT

Hi @gcusello and @manjunathmeti ,

Thanks for the information can you please let me know if we can delete the add-on using Splunk UI.

Thanks

Re: How to uninstall Splunk add-ons without the help of CLI

gcusello — Tue, 09 Mar 2021 09:50:10 GMT

Hi @Nith1,

no you cannot: you can remove an app or a TA only following the steps of my previous message or the REST API hinted by @manjunathmeti .

Ciao.

Giuseppe