Extracting Searches From Apps

[amortiz]

I have a whale of a time getting Splunk apps approved to use with Splunk. Is there a way to look through the splunk apps that are on the site and pull out some of the scripts and searches?

Don't know the copyright/copyleft of the apps but I've read through the documentation of the *nix app and it would be quicker or me to use parts I need rather than go through our approval process.
Thanks,
Al

[alacercogitatus · Accepted solution]

The App once downloaded is a tarball (tar.gz) renamed as an SPL. Download it, rename it, unzip and untar it, and then you can see the files. You don't have to install into Splunk to see the items, but everything will have to be done in text files instead of the GUI. I would recommend reading the license to make sure you are allowed to "borrow" parts of the searches and dashboards.