Is there an easy way to download an app trough the UI?
The common way through CLI is to package the app from etc/apps/myapp using
splunk package app myapp to create the package, then download it through the CLI.
I'm looking for something similar trough the UI.
The app can be found in the operating system at
but you can also downloaded it with a URI
Replace the words in capitals with your values.
If the environment you're working in doesn't have that App Exporter installed - and you don't have SSH to run the CLI, you can initiate the packaging step from your browser:
Port is usually 8089 for the REST API. This command creates the .spl of the named app under $SPLUNK_HOME/etc/system/static/app-packages and gives you the url you can then use to download it.
I have been informed this endpoint (/static/app-packages/APPNAME.spl) is now deprecated and may disappear in future versions. If you are relying on this, now is the time to look for an alternative.