Getting Data In

Is there a way to disable a Splunk app using REST and CURL command?

dineshraj9
Builder

I want to disable a Splunk app using curl command and then enable it back. Is there a way to do it without restarting Splunk?

I couldn't find anything in the REST reference manual for Apps - http://docs.splunk.com/Documentation/Splunk/6.5.1/RESTREF/RESTapps

0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

That's not documented there because it's documented more generally here: http://docs.splunk.com/Documentation/Splunk/6.5.1/RESTUM/RESTusing#Enable_and_disable_endpoint

Same principle applies for all disable-able objects.

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

That's not documented there because it's documented more generally here: http://docs.splunk.com/Documentation/Splunk/6.5.1/RESTUM/RESTusing#Enable_and_disable_endpoint

Same principle applies for all disable-able objects.

martin_mueller
SplunkTrust
SplunkTrust

In an SHC you should distribute this via the SHC deployer.

0 Karma

dineshraj9
Builder

The endpoint works for disabling an app on the search head where I issue the CURL command, but the changes don't get replicated to any of the other peers in the SHC.

Is there some way I can disable it across all peers?
Do I need to issue the curl command on all peers?

0 Karma

woodcock
Esteemed Legend

You can disable REST for the entire node but I don't think you can selectively.

0 Karma
Get Updates on the Splunk Community!

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...

SOCin’ it to you at Splunk University

Splunk University is expanding its instructor-led learning portfolio with dedicated Security tracks at .conf25 ...

Credit Card Data Protection & PCI Compliance with Splunk Edge Processor

Organizations handling credit card transactions know that PCI DSS compliance is both critical and complex. The ...