- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Windows doesn't have a built-in way to unpack the .tar.gz format used by Splunk apps downloaded from Splunkbase. What are good ways to install Splunk apps on Windows?
I'm ideally looking for multiple options I can use dependning on the scenario:
- using the Splunk command-line (CLI)
- using a free, downloadable, 3rd-party Windows GUI unzipper (can you recommend a good one for .tar.gz files?)
- via the Splunk REST API, so I can automate a solution for an install of an app on a remote Splunk server
- any other cool way you can suggest.
Of course, what I really want is a way in the Splunk launcher or Manager that I can upload an app into Splunk, but I assume this isn't there in Splunk 4.1 yet.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Alternatively you can use CLI command:
splunk install app /tmp/myapp.spl
Also check out Web Terminal for Splunk app to access remote CLI from your browser.
Or use REST API for app install:
Documentation
If you need to extract it manually, there's a free 3rd-party Windows GUI: 7-Zip
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This was true of splunk before version 4.2. Now you can go to Manager >> Apps >> Install app from file
If you have an older version of Splunk then you have the Python programming language at your disposal and a handy script called untarit.py.
For an app file called "Foo.spl", type the following on one line:
C:\Program Files\Splunk\Python-2.6>..\bin\python ..\bin\untarit.py ..\etc\apps\Foo.spl ..\etc\apps\
Note, you must be in the Python-2.6 directory for Python to be able to find all the modules it needs, hence all the horrible '..\' stuff.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
what he said! go to filehippo.com get 7zip right click the tar file... extract to where u want it.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Alternatively you can use CLI command:
splunk install app /tmp/myapp.spl
Also check out Web Terminal for Splunk app to access remote CLI from your browser.
Or use REST API for app install:
Documentation
If you need to extract it manually, there's a free 3rd-party Windows GUI: 7-Zip
