Getting Data In

Non DS deployed Apps

psamuel23
Loves-to-Learn

Hello Fellow Splunkers ,

Is there a way that I can get a list of Input apps on a UF host that are not distributed by the DS that its connected to ? (i.e Locally created Inputs) - How ?

If Yes , can we disable it by using Splunk or DS or a master app that can disable all non DS deployed apps. -please suggest how again !?

Regard

Samuel

Labels (3)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Other than built-in apps (like search), a UF will install only what the DS tells it to install.  If an app is installed locally, it will be removed the next time the UF phones home and gets a list of apps from the DS.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...