Getting Data In

How to disable Splunk app with curl command?

srinivasup
Explorer

Does anyone know the curl command to disable Splunk app?

Tags (2)
0 Karma

dineshraj9
Builder

Try using the below CURL commands to enable/disable -

curl -k -u admin:password https://localhost:8089/servicesNS/nobody/-/apps/local/<your_app_name>/disable -X POST
curl -k -u admin:password https://localhost:8089/servicesNS/nobody/-/apps/local/<your_app_name>/enable -X POST

However, it will make the change only on the search head where you issue the CURL command. You may have to run the same command on all SHC peers.

0 Karma

aaraneta_splunk
Splunk Employee
Splunk Employee

@srinivasup - Were you able to test out renjith.nair's solution? Did it work? If yes, please don't forget to resolve this post by clicking on "Accept". If you still need more help, please provide a comment with some feedback. Thanks!

0 Karma

renjith_nair
Legend

Try

curl -k -u admin:pass https://localhost:8089/servicesNS/nobody/<your app name>/configs/conf-app/install -d state=disabled

Reference :
http://docs.splunk.com/Documentation/Splunk/6.5.1/Admin/Appconf#.5Binstall.5D
https://docs.splunk.com/Documentation/Splunk/6.5.1/RESTREF/RESTconf#configs.2Fconf-.7Bfile.7D.2F.7Bs...

---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma

dineshraj9
Builder

I had tried this, but didn't work. Being a configuration it requires a restart for the state change to reflect.

0 Karma
Get Updates on the Splunk Community!

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...