Dashboards & Visualizations

Is there an easy way to download an app from the UI?

sduchene_splunk
Splunk Employee
Splunk Employee

Hi all,

Is there an easy way to download an app trough the UI?
The common way through CLI is to package the app from etc/apps/myapp using
splunk package app myapp to create the package, then download it through the CLI.
I'm looking for something similar trough the UI.

0 Karma
1 Solution

BobM
Builder

The app can be found in the operating system at

$SPLUNK_HOME/etc/system/static/app-packages/APPNAME.spl

but you can also downloaded it with a URI

https://YOURSERVER:MANAGEMENTPORT/static/app-packages/APPNAME.spl

Replace the words in capitals with your values.

View solution in original post

woodcock
Esteemed Legend

Try this great app (App Exporter):

https://splunkbase.splunk.com/app/2613/

0 Karma

BobM
Builder

The app can be found in the operating system at

$SPLUNK_HOME/etc/system/static/app-packages/APPNAME.spl

but you can also downloaded it with a URI

https://YOURSERVER:MANAGEMENTPORT/static/app-packages/APPNAME.spl

Replace the words in capitals with your values.

View solution in original post

bmunson_splunk
Splunk Employee
Splunk Employee

I have been informed this endpoint (/static/app-packages/APPNAME.spl) is now deprecated and may disappear in future versions. If you are relying on this, now is the time to look for an alternative.

0 Karma

MuS
SplunkTrust
SplunkTrust

this little helper https://splunkbase.splunk.com/app/2613/ will do it all form the UI

gf13579
Communicator

If the environment you're working in doesn't have that App Exporter installed - and you don't have SSH to run the CLI, you can initiate the packaging step from your browser:

https://answers.splunk.com/answers/333880/is-there-an-easy-way-to-download-an-app-from-the-u.html

Port is usually 8089 for the REST API. This command creates the .spl of the named app under $SPLUNK_HOME/etc/system/static/app-packages and gives you the url you can then use to download it.

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!