Splunk Dev

Process for renaming an app

thesteve
Path Finder

I started to build an app using the legacy XML style.

While building it, I decided to move forward using the newer web framework.

I'm currently wondering about re-naming my new web framework application and deleting my existing one.

Is it a matter of renaming the directories?

mv original_name legacy_original_name
mv new_name original_name

It seems pretty straightforward, but I'm concerned I might be missing something.

Tags (2)
0 Karma
1 Solution

lguinn2
Legend

A simple rename of the app directory will work. However you might want to also edit the app.conf file to change the displayed name of the app as well.

And you will need to restart Splunk.

View solution in original post

lguinn2
Legend

A simple rename of the app directory will work. However you might want to also edit the app.conf file to change the displayed name of the app as well.

And you will need to restart Splunk.

ybongart_splunk
Splunk Employee
Splunk Employee

Also remember to change:

  • the folders under /etc/users where it exists
  • user-prefs.conf in /etc/users/*/user-prefs/ for users having the old name set in the appOrder or default_namespace attributes
  • user-prefs.conf in /etc/apps/user-prefs/local for roles having the old name set in the default_namespace attribute

lguinn2
Legend

BTW, it looks like in Splunk 6, the savedsearches.conf file has an attribute that contains the app name:

request.ui_dispatch_app = oldappname

So you are right, and you probably do want to change those. And don't forget the display name in app.conf. Thanks, I learned something new about Splunk 6!

0 Karma

thesteve
Path Finder

Well, now I don't know for sure if it would have worked. 🙂 I had inadvertently changed some search parameters when I replaced the app name in my templates and I think that might have been what I was fighting.

0 Karma

thesteve
Path Finder

hmph. That didn't quite work out. I did a "find-in-files" and found a lot of references to the old app name and replaced them, but that still didn't work. It's early enough now that I just grabbed the few files I did build and re-created the app from scratch.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...