Deployment Architecture

What are the unnecessary apps that ship by default with standard Splunk installation?

the_wolverine
Champion

I want to clean up my distribution for deployment and would like to know which apps are unnecessary for my deployment of Splunk Server (Search heads and Indexers):

Necessary:
search
learned
launcher

Unnecessary (?):
gettingstarted
sample_app
SplunkForwarder
SplunkLightForwarder
legacy

Tags (2)
0 Karma

miteshvohra
Contributor

Splunk binary can be used to convert the instance into to Splunk Light Forwarder or Splunk Heavy Forwarder. Both these roles are different than Splunk Universal Forwarder. After installation of the instance, enabling any of the LF or SplkFwdr app, turns off the WebUI and converts the instance in to the role defined within these Apps.

On the other hand, "sample_app" is used to create custom apps. While creating a custom app, Splunk UI Wizard prompts to select "barebones" or "sample_app" to choose from.

Will dig more for 'legacy' app and update the post again.

- Mitesh Vohra.

0 Karma

yannK
Splunk Employee
Splunk Employee

It's about that.

I would be careful with the forwarder app, because it's is still possible to try to enable them from the manager on "forwarding", and it will fail.

0 Karma

the_wolverine
Champion

This is not yet an official answer as far as I'm aware.

0 Karma

piebob
Motivator

please remember to accept the answer when it answers your question.

0 Karma

the_wolverine
Champion

Figured its ok to remove since they are both are disabled by default.

0 Karma
Get Updates on the Splunk Community!

Announcing General Availability of Splunk Incident Intelligence!

Digital transformation is real! Across industries, companies big and small are going through rapid digital ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...