https://community.splunk.com/t5/Splunk-Search/Searching-Listing-down-all-Installed-App-Usage-to-find-how-which/m-p/549792#M156033 <P>hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/233971">@jawk339</a>,<BR />The below query will give you how many times the apps are accessed. One more thing before uninstalling the&nbsp;<SPAN>least used apps you need to makes sure that the configurations (like web.conf, limits.conf, server.conf etc.) and knowledge objects (props.conf, macros.conf, transforms.conf, lookups etc.) in those apps are not used for anything.</SPAN></P><LI-CODE lang="markup">index=_internal sourcetype="*access" [| rest /services/apps/local | where core=0 | fields title | mvcombine delim=" OR " title | return $title] | rex field=uri_path "servicesNS\/[^\/]+\/(?&lt;app&gt;[^\/]+)" | stats count by app | append [| rest /services/apps/local | where core=0 | table title | rename title as app] | stats sum(count) as "Number of times used" by app | fillnull | sort -"Number of times used"</LI-CODE><P>&nbsp;&nbsp;</P><P>If this reply helps you, a like would be appreciated.</P> Thu, 29 Apr 2021 09:42:38 GMT manjunathmeti 2021-04-29T09:42:38Z https://community.splunk.com/t5/Splunk-Search/Searching-Listing-down-all-Installed-App-Usage-to-find-how-which/m-p/549765#M156015 <P>Hey all!<BR /><BR />I am tasked to do some housekeeping and find out which installed apps are being used the least so that I can uninstall them.<BR />Is there a search string I can use to list down all the apps to see which app is being used often or being used the least?&nbsp;<BR /><BR />Best Regards,<BR />jawk339</P> Thu, 29 Apr 2021 07:49:55 GMT https://community.splunk.com/t5/Splunk-Search/Searching-Listing-down-all-Installed-App-Usage-to-find-how-which/m-p/549765#M156015 jawk339 2021-04-29T07:49:55Z https://community.splunk.com/t5/Splunk-Search/Searching-Listing-down-all-Installed-App-Usage-to-find-how-which/m-p/549792#M156033 <P>hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/233971">@jawk339</a>,<BR />The below query will give you how many times the apps are accessed. One more thing before uninstalling the&nbsp;<SPAN>least used apps you need to makes sure that the configurations (like web.conf, limits.conf, server.conf etc.) and knowledge objects (props.conf, macros.conf, transforms.conf, lookups etc.) in those apps are not used for anything.</SPAN></P><LI-CODE lang="markup">index=_internal sourcetype="*access" [| rest /services/apps/local | where core=0 | fields title | mvcombine delim=" OR " title | return $title] | rex field=uri_path "servicesNS\/[^\/]+\/(?&lt;app&gt;[^\/]+)" | stats count by app | append [| rest /services/apps/local | where core=0 | table title | rename title as app] | stats sum(count) as "Number of times used" by app | fillnull | sort -"Number of times used"</LI-CODE><P>&nbsp;&nbsp;</P><P>If this reply helps you, a like would be appreciated.</P> Thu, 29 Apr 2021 09:42:38 GMT https://community.splunk.com/t5/Splunk-Search/Searching-Listing-down-all-Installed-App-Usage-to-find-how-which/m-p/549792#M156033 manjunathmeti 2021-04-29T09:42:38Z https://community.splunk.com/t5/Splunk-Search/Searching-Listing-down-all-Installed-App-Usage-to-find-how-which/m-p/549797#M156037 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/129090">@manjunathmeti</a>&nbsp;<BR />Thank you so much! That is exactly what I am looking for!! <span class="lia-unicode-emoji" title=":grinning_face_with_smiling_eyes:">😄</span></P> Thu, 29 Apr 2021 09:58:53 GMT https://community.splunk.com/t5/Splunk-Search/Searching-Listing-down-all-Installed-App-Usage-to-find-how-which/m-p/549797#M156037 jawk339 2021-04-29T09:58:53Z