topic Re: How to remove/uninstall an app in Installation

How to remove/uninstall an app

Roy_9 — Wed, 25 Oct 2023 14:56:54 GMT

Hello,

We have few apps that are no longer needed in our on premise environment. We maintain git repo for configs.

Can anyone please help me with the steps to uninstall/remove the app.

Thanks

Re: How to remove/uninstall an app

richgalloway — Wed, 25 Oct 2023 15:34:34 GMT

The procedure varies depending on the environment.

In a standalone server or independent search heads, indexers, and heavy forwarders, just remove the app directory from $SPLUNK_HOME/etc/apps and restart Splunk.

In a search head cluster, remove the app from $SPLUNK_HOME/etc/shcluster on the SHC Deployer and push the shbundle.

In an indexer cluster, remove the app from $SPLUNK_HOME/etc/manager-apps (or master-apps) and push the bundle.

For universal forwarders, remove the app from the appropriate server class(es). If no clients use the app, it can be removed from $SPLUNK_HOME/etc/deployment-apps.

Re: How to remove/uninstall an app

paddygriffin — Thu, 19 Sep 2024 13:55:06 GMT

does removing it from the serverclass cause it to be deinstalled on the forwarders in the class?

Re: How to remove/uninstall an app

richgalloway — Thu, 19 Sep 2024 20:03:56 GMT

Yes, removing an app from the server class will cause the client to uninstall that app.