Getting Data In

How exactly does one delete an App

asarolkar
Builder

So, if you want a delete an app in Splunk, you could always delete every view in that app.
The app would live but there would be nothing in it.

Trying to achieve a better outcome that that.
I want to know how to delete it completely (again, NOT DISABLE IT by going to Splunk > Manager > App, actually delete it)

This is my confirmation : Go to App> on the top right corner of the screen, I can no longer see it.

I actually tried to go to $SPLUNK_HOME/etc/apps/ and deleted the folder for that app and restarted Splunk and that did not exactly work out (I had to restore the backup because Splunk started doing some weird crap)

Tags (3)
0 Karma

yannK
Splunk Employee
Splunk Employee

Do not delete the search apps (that contains all the manager pages, and default view for the other apps)

Otherwise you can delete the folder to completely remove the app. But user may still have private objects in their profiles.

Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...