What are the unnecessary apps that ship by default with standard Splunk installation?

[the_wolverine]

I want to clean up my distribution for deployment and would like to know which apps are unnecessary for my deployment of Splunk Server (Search heads and Indexers):

Necessary:
search
learned
launcher

Unnecessary (?):
gettingstarted
sample_app
SplunkForwarder
SplunkLightForwarder
legacy

[miteshvohra]

Splunk binary can be used to convert the instance into to Splunk Light Forwarder or Splunk Heavy Forwarder. Both these roles are different than Splunk Universal Forwarder. After installation of the instance, enabling any of the LF or SplkFwdr app, turns off the WebUI and converts the instance in to the role defined within these Apps.

On the other hand, "sample_app" is used to create custom apps. While creating a custom app, Splunk UI Wizard prompts to select "barebones" or "sample_app" to choose from.

Will dig more for 'legacy' app and update the post again.

- Mitesh Vohra.

[yannK]

It's about that.

I would be careful with the forwarder app, because it's is still possible to try to enable them from the manager on "forwarding", and it will fail.

[the_wolverine]

This is not yet an official answer as far as I'm aware.

[piebob]

please remember to accept the answer when it answers your question.

[the_wolverine]

Figured its ok to remove since they are both are disabled by default.