Getting Data In

How to disable Splunk app with curl command?

srinivasup
Explorer

Does anyone know the curl command to disable Splunk app?

Tags (2)
0 Karma

dineshraj9
Builder

Try using the below CURL commands to enable/disable -

curl -k -u admin:password https://localhost:8089/servicesNS/nobody/-/apps/local/<your_app_name>/disable -X POST
curl -k -u admin:password https://localhost:8089/servicesNS/nobody/-/apps/local/<your_app_name>/enable -X POST

However, it will make the change only on the search head where you issue the CURL command. You may have to run the same command on all SHC peers.

0 Karma

aaraneta_splunk
Splunk Employee
Splunk Employee

@srinivasup - Were you able to test out renjith.nair's solution? Did it work? If yes, please don't forget to resolve this post by clicking on "Accept". If you still need more help, please provide a comment with some feedback. Thanks!

0 Karma

renjith_nair
Legend

Try

curl -k -u admin:pass https://localhost:8089/servicesNS/nobody/<your app name>/configs/conf-app/install -d state=disabled

Reference :
http://docs.splunk.com/Documentation/Splunk/6.5.1/Admin/Appconf#.5Binstall.5D
https://docs.splunk.com/Documentation/Splunk/6.5.1/RESTREF/RESTconf#configs.2Fconf-.7Bfile.7D.2F.7Bs...

---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma

dineshraj9
Builder

I had tried this, but didn't work. Being a configuration it requires a restart for the state change to reflect.

0 Karma
Get Updates on the Splunk Community!

Cultivate Your Career Growth with Fresh Splunk Training

Growth doesn’t just happen—it’s nurtured. Like tending a garden, developing your Splunk skills takes the right ...

Introducing a Smarter Way to Discover Apps on Splunkbase

We’re excited to announce the launch of a foundational enhancement to Splunkbase: App Tiering.  Because we’ve ...

How to Send Splunk Observability Alerts to Webex teams in Minutes

As a Developer Evangelist at Splunk, my team and I are constantly tinkering with technology to explore its ...