Getting Data In

how to install downloaded Splunk apps on windows without untar

Justin_Grant
Contributor

Windows doesn't have a built-in way to unpack the .tar.gz format used by Splunk apps downloaded from Splunkbase. What are good ways to install Splunk apps on Windows?

I'm ideally looking for multiple options I can use dependning on the scenario:

  • using the Splunk command-line (CLI)
  • using a free, downloadable, 3rd-party Windows GUI unzipper (can you recommend a good one for .tar.gz files?)
  • via the Splunk REST API, so I can automate a solution for an install of an app on a remote Splunk server
  • any other cool way you can suggest.

Of course, what I really want is a way in the Splunk launcher or Manager that I can upload an app into Splunk, but I assume this isn't there in Splunk 4.1 yet.

1 Solution

Leo
Splunk Employee
Splunk Employee

Alternatively you can use CLI command:

splunk install app /tmp/myapp.spl

Also check out Web Terminal for Splunk app to access remote CLI from your browser.

Or use REST API for app install:
Documentation

If you need to extract it manually, there's a free 3rd-party Windows GUI: 7-Zip

View solution in original post

Eqalis
Explorer

This was true of splunk before version 4.2. Now you can go to Manager >> Apps >> Install app from file

If you have an older version of Splunk then you have the Python programming language at your disposal and a handy script called untarit.py.

For an app file called "Foo.spl", type the following on one line:

C:\Program Files\Splunk\Python-2.6>..\bin\python ..\bin\untarit.py ..\etc\apps\Foo.spl ..\etc\apps\

Note, you must be in the Python-2.6 directory for Python to be able to find all the modules it needs, hence all the horrible '..\' stuff.

hiddenkirby
Contributor

what he said! go to filehippo.com get 7zip right click the tar file... extract to where u want it.

Leo
Splunk Employee
Splunk Employee

Alternatively you can use CLI command:

splunk install app /tmp/myapp.spl

Also check out Web Terminal for Splunk app to access remote CLI from your browser.

Or use REST API for app install:
Documentation

If you need to extract it manually, there's a free 3rd-party Windows GUI: 7-Zip

Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...