Deployment Architecture

How to uninstall a disabled app - 'splunk_app_stream'

New Member

I am looking into uninstalling a disabled Splunk app - 'splunk_app_stream' from the Splunk Cloud and would like to know the best practices in performing this task?

I have no uninstall button on the GUI, so I am leading to think that it needs to be removed from the 2 x Heavy Forwarders?

I have done some research and can see that it is recommended to remove the app folder from $SPLUNK_HOME/etc/apps/ however I cannot see the 'splunk_app_stream' folder listed in the directory.

Does anyone have advice on how to remove the disabled 'splunk_app_stream' app?

0 Karma


All the splunk apps are installed at $SPLUNK_HOME/etc/apps. When you disable the app, the app will remain at $SPLUNK_HOME/etc/apps, but it without any function.
If the Splunk_TA_stream app is no longer on this path, it seems the app is already been removed.

For further information about how the delete apps/add-ons, check this splunk document:

0 Karma

Splunk Employee
Splunk Employee

Where are you not seeing the splunk_app_stream folder in search head or heavy forwarder?
Is the Splunk_TA_stream folder is present at $SPLUNK_HOME/etc/apps/ ?

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!