Deployment Architecture

How to uninstall a disabled app - 'splunk_app_stream'

nathant089
New Member

I am looking into uninstalling a disabled Splunk app - 'splunk_app_stream' from the Splunk Cloud and would like to know the best practices in performing this task?

I have no uninstall button on the GUI, so I am leading to think that it needs to be removed from the 2 x Heavy Forwarders?

I have done some research and can see that it is recommended to remove the app folder from $SPLUNK_HOME/etc/apps/ however I cannot see the 'splunk_app_stream' folder listed in the directory.

https://docs.splunk.com/Documentation/Splunk/8.0.0/Admin/Managingappobjects

Does anyone have advice on how to remove the disabled 'splunk_app_stream' app?

0 Karma

ivanreis
Builder

All the splunk apps are installed at $SPLUNK_HOME/etc/apps. When you disable the app, the app will remain at $SPLUNK_HOME/etc/apps, but it without any function.
If the Splunk_TA_stream app is no longer on this path, it seems the app is already been removed.

For further information about how the delete apps/add-ons, check this splunk document:

https://docs.splunk.com/Documentation/Splunk/8.0.0/Admin/Managingappobjects#Uninstall_an_app_or_add-...

0 Karma

uagrawal_splunk
Splunk Employee
Splunk Employee

Where are you not seeing the splunk_app_stream folder in search head or heavy forwarder?
Is the Splunk_TA_stream folder is present at $SPLUNK_HOME/etc/apps/ ?

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...