Getting Data In
Highlighted

how to install downloaded Splunk apps on windows without untar

Contributor

Windows doesn't have a built-in way to unpack the .tar.gz format used by Splunk apps downloaded from Splunkbase. What are good ways to install Splunk apps on Windows?

I'm ideally looking for multiple options I can use dependning on the scenario:

  • using the Splunk command-line (CLI)
  • using a free, downloadable, 3rd-party Windows GUI unzipper (can you recommend a good one for .tar.gz files?)
  • via the Splunk REST API, so I can automate a solution for an install of an app on a remote Splunk server
  • any other cool way you can suggest.

Of course, what I really want is a way in the Splunk launcher or Manager that I can upload an app into Splunk, but I assume this isn't there in Splunk 4.1 yet.

Highlighted

Re: how to install downloaded Splunk apps on windows without untar

Splunk Employee
Splunk Employee

Alternatively you can use CLI command:

splunk install app /tmp/myapp.spl

Also check out Web Terminal for Splunk app to access remote CLI from your browser.

Or use REST API for app install:
Documentation

If you need to extract it manually, there's a free 3rd-party Windows GUI: 7-Zip

View solution in original post

Highlighted

Re: how to install downloaded Splunk apps on windows without untar

Contributor

what he said! go to filehippo.com get 7zip right click the tar file... extract to where u want it.

Highlighted

Re: how to install downloaded Splunk apps on windows without untar

Explorer

This was true of splunk before version 4.2. Now you can go to Manager >> Apps >> Install app from file

If you have an older version of Splunk then you have the Python programming language at your disposal and a handy script called untarit.py.

For an app file called "Foo.spl", type the following on one line:

C:\Program Files\Splunk\Python-2.6>..\bin\python ..\bin\untarit.py ..\etc\apps\Foo.spl ..\etc\apps\

Note, you must be in the Python-2.6 directory for Python to be able to find all the modules it needs, hence all the horrible '..\' stuff.