Getting Data In

how to export a splunk app to .spl

chimbudp
Contributor

What is command that i need to use to export a splunk app into .spl format ?

Tags (3)
1 Solution

chimbudp
Contributor

Got the answer:

For Windows Servers:

Goto-> Command prompt

cd %SPLUNK_HOME%\bin
splunk package app MyAppName
Splunk username:
Password :

Application is packaged and stored in location:

%SPLUNK_HOME%\etc\system\static\app-packages\MyAppName.spl

View solution in original post

woodcock
Esteemed Legend

There's an app for that, too!

https://splunkbase.splunk.com/app/2613/

mcronkrite_splu
Splunk Employee
Splunk Employee

FYI:
When you use the package command and do revisions, the app will be archived in a new folder:

%SPLUNK_HOME%\etc\system\static\app-packages\DELETEME_..\

This folder needs to periodically and regularly deleted manually.

0 Karma

chimbudp
Contributor

Got the answer:

For Windows Servers:

Goto-> Command prompt

cd %SPLUNK_HOME%\bin
splunk package app MyAppName
Splunk username:
Password :

Application is packaged and stored in location:

%SPLUNK_HOME%\etc\system\static\app-packages\MyAppName.spl

MuS
SplunkTrust
SplunkTrust

pascalhurni
Observer

For me I had to use the command on the second point like this: ./splunk package app MyAppName

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Laser Bananas and Edge Hubs: Exploring Operational Technology (OT) Data Through a ...

  OT is a different environment to traditional IT and can have interesting challenges when interfacing the ...

Event Series: Mastering AI Tokenomics and Splunk Agent Observability

Beyond the Black Box: Correlating AI Performance and Tokenomics with Splunk Agent Observability   As ...

span_metrics: The OpenTelemetry-Idiomatic Way to See Inside Your Services

You open a trace in Splunk Observability Cloud and everything looks fine. One root span, order-pipeline, with ...