Getting Data In

How do I know which apps I can remove? Where can I get more information about all installed apps?

JamesRConley
Explorer

By default there are many apps installed. I am attempting to find out which of my apps I am able to remove from the Indexer and Search Head. For example there is "searchheads" app listed in my apps. I have no idea what this is nor where I can find more information. Some of the apps are self explanatory such as "Search & Reporting" but how do I find more information about some of these ambiguous apps?

0 Karma
1 Solution

corey_reynders
Path Finder

Yeah, I started writing that app and never finished because our trial license expired. Your guess is as good as mine as to where I was going with that... just delete it.

View solution in original post

0 Karma

corey_reynders
Path Finder

Yeah, I started writing that app and never finished because our trial license expired. Your guess is as good as mine as to where I was going with that... just delete it.

0 Karma

corey_reynders
Path Finder

I guess to further answer your questions, if the app does not have an splunk apps ID it is not a public app and will not have public information that people will allow people to answer questions.

Try searching the app directory for a splunk apps ID.

grep -r "apps.splunk.com/app/" $home/etc/apps/

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...