Deployment Architecture

How to uninstall a disabled app - 'splunk_app_stream'

nathant089
New Member

I am looking into uninstalling a disabled Splunk app - 'splunk_app_stream' from the Splunk Cloud and would like to know the best practices in performing this task?

I have no uninstall button on the GUI, so I am leading to think that it needs to be removed from the 2 x Heavy Forwarders?

I have done some research and can see that it is recommended to remove the app folder from $SPLUNK_HOME/etc/apps/ however I cannot see the 'splunk_app_stream' folder listed in the directory.

https://docs.splunk.com/Documentation/Splunk/8.0.0/Admin/Managingappobjects

Does anyone have advice on how to remove the disabled 'splunk_app_stream' app?

0 Karma

ivanreis
Builder

All the splunk apps are installed at $SPLUNK_HOME/etc/apps. When you disable the app, the app will remain at $SPLUNK_HOME/etc/apps, but it without any function.
If the Splunk_TA_stream app is no longer on this path, it seems the app is already been removed.

For further information about how the delete apps/add-ons, check this splunk document:

https://docs.splunk.com/Documentation/Splunk/8.0.0/Admin/Managingappobjects#Uninstall_an_app_or_add-...

0 Karma

uagrawal_splunk
Splunk Employee
Splunk Employee

Where are you not seeing the splunk_app_stream folder in search head or heavy forwarder?
Is the Splunk_TA_stream folder is present at $SPLUNK_HOME/etc/apps/ ?

0 Karma
Get Updates on the Splunk Community!

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...