Deployment Architecture

How to uninstall a disabled app - 'splunk_app_stream'

nathant089
New Member

I am looking into uninstalling a disabled Splunk app - 'splunk_app_stream' from the Splunk Cloud and would like to know the best practices in performing this task?

I have no uninstall button on the GUI, so I am leading to think that it needs to be removed from the 2 x Heavy Forwarders?

I have done some research and can see that it is recommended to remove the app folder from $SPLUNK_HOME/etc/apps/ however I cannot see the 'splunk_app_stream' folder listed in the directory.

https://docs.splunk.com/Documentation/Splunk/8.0.0/Admin/Managingappobjects

Does anyone have advice on how to remove the disabled 'splunk_app_stream' app?

0 Karma

ivanreis
Builder

All the splunk apps are installed at $SPLUNK_HOME/etc/apps. When you disable the app, the app will remain at $SPLUNK_HOME/etc/apps, but it without any function.
If the Splunk_TA_stream app is no longer on this path, it seems the app is already been removed.

For further information about how the delete apps/add-ons, check this splunk document:

https://docs.splunk.com/Documentation/Splunk/8.0.0/Admin/Managingappobjects#Uninstall_an_app_or_add-...

0 Karma

uagrawal_splunk
Splunk Employee
Splunk Employee

Where are you not seeing the splunk_app_stream folder in search head or heavy forwarder?
Is the Splunk_TA_stream folder is present at $SPLUNK_HOME/etc/apps/ ?

0 Karma
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...