Getting Data In

How to install a remote app into a Splunk Search Head using REST API?

sibiv196
New Member

I need to write a python script to install an app/add-on to the remote Splunk search head.

The app file ".spl" and ".tgz" is in the server which hosts my python script.

As far as i understand from all the errors that I got and from documentation, bot services/app/local and services/app/appinstall either searches for a local file or splunkbase but never from a remote server 

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

based on documentation and other answers the local in this content means splunk SH server not the local server where you are running your python script! So you must 1st copy your app to target splunk SH server and then you can use a REST api to install it "locally" on that server. See e.g. https://community.splunk.com/t5/Getting-Data-In/Using-the-REST-API-to-install-an-app-from-a-file/td-...

r. Ismo

0 Karma

sibiv196
New Member

Thank you @isoutamo  for the reply. 
But is there any known way to install an app from remote server. Thinking of ways even beyond REST API

0 Karma

isoutamo
SplunkTrust
SplunkTrust

I think that only way to install into remote server is via GUI. Just login to remote server (SH or HF and if you have individual indexers then also those can use).  Then open Apps on top navigation bar and select Manage Apps. Then Install App from File and follow instructions.

If you have CI/CD pipeline or possibility to log on shell level to those server, then you can do a scripted installation. 

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...