Windows doesn't have a built-in way to unpack the .tar.gz format used by Splunk apps downloaded from Splunkbase. What are good ways to install Splunk apps on Windows?
I'm ideally looking for multiple options I can use dependning on the scenario:
Of course, what I really want is a way in the Splunk launcher or Manager that I can upload an app into Splunk, but I assume this isn't there in Splunk 4.1 yet.
Alternatively you can use CLI command:
splunk install app /tmp/myapp.spl
Also check out Web Terminal for Splunk app to access remote CLI from your browser.
Or use REST API for app install:
Documentation
If you need to extract it manually, there's a free 3rd-party Windows GUI: 7-Zip
This was true of splunk before version 4.2. Now you can go to Manager >> Apps >> Install app from file
If you have an older version of Splunk then you have the Python programming language at your disposal and a handy script called untarit.py.
For an app file called "Foo.spl", type the following on one line:
C:\Program Files\Splunk\Python-2.6>..\bin\python ..\bin\untarit.py ..\etc\apps\Foo.spl ..\etc\apps\
Note, you must be in the Python-2.6 directory for Python to be able to find all the modules it needs, hence all the horrible '..\' stuff.
what he said! go to filehippo.com get 7zip right click the tar file... extract to where u want it.
Alternatively you can use CLI command:
splunk install app /tmp/myapp.spl
Also check out Web Terminal for Splunk app to access remote CLI from your browser.
Or use REST API for app install:
Documentation
If you need to extract it manually, there's a free 3rd-party Windows GUI: 7-Zip