Splunk Dev

Process for renaming an app

thesteve
Path Finder

I started to build an app using the legacy XML style.

While building it, I decided to move forward using the newer web framework.

I'm currently wondering about re-naming my new web framework application and deleting my existing one.

Is it a matter of renaming the directories?

mv original_name legacy_original_name
mv new_name original_name

It seems pretty straightforward, but I'm concerned I might be missing something.

Tags (2)
0 Karma
1 Solution

lguinn2
Legend

A simple rename of the app directory will work. However you might want to also edit the app.conf file to change the displayed name of the app as well.

And you will need to restart Splunk.

View solution in original post

lguinn2
Legend

A simple rename of the app directory will work. However you might want to also edit the app.conf file to change the displayed name of the app as well.

And you will need to restart Splunk.

ybongart_splunk
Splunk Employee
Splunk Employee

Also remember to change:

  • the folders under /etc/users where it exists
  • user-prefs.conf in /etc/users/*/user-prefs/ for users having the old name set in the appOrder or default_namespace attributes
  • user-prefs.conf in /etc/apps/user-prefs/local for roles having the old name set in the default_namespace attribute

lguinn2
Legend

BTW, it looks like in Splunk 6, the savedsearches.conf file has an attribute that contains the app name:

request.ui_dispatch_app = oldappname

So you are right, and you probably do want to change those. And don't forget the display name in app.conf. Thanks, I learned something new about Splunk 6!

0 Karma

thesteve
Path Finder

Well, now I don't know for sure if it would have worked. 🙂 I had inadvertently changed some search parameters when I replaced the app name in my templates and I think that might have been what I was fighting.

0 Karma

thesteve
Path Finder

hmph. That didn't quite work out. I did a "find-in-files" and found a lot of references to the old app name and replaced them, but that still didn't work. It's early enough now that I just grabbed the few files I did build and re-created the app from scratch.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Event Series May & June: From Network Visibility to Service Intelligence

Unifying the Network: Moving from Alert Noise to Service Intelligence with Splunk ITSI In today’s hybrid ...

Global Splunk User Group Events: May + June 2026

Your Splunk Community Awaits: Discover Upcoming User Group Events Worldwide    Staying ahead in the fast-paced ...

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...