- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How to install splunk app through Linux terminal?
I am just confused to install Splunk app (truStar) via terminal, please don't tell me to download and upload via Splunk web maybe a beginner do that in the most organization uses Linux OS. I downloaded app.tgz file, if it is Splunk installation we do get wget link right, then for an app how to do?
Thanks, I appreciate it.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Hi
Go to splunk bin location
Ex:
1) ./splunk install app foo.tar
2) ./splunk install app https://splunkbase.splunk.com/app/1603/
Thanks
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

For a app you could just unpack the file and copy the folder to the destination.
Standard splunk enviroment
/opt/splunk/etc/apps
After a
/opt/splunk/bin/splunk restart
The app wil be loaded,
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ok, i will check and let you know
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Hi @Rocky31
Looks like you have a few possible solutions to your question. If one of them provided a working solution, please don't forget to click "Accept" below the best answer to resolve this post. If you still need help, please leave a comment.
Thanks!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
yea, still working on it,
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

My other answer wrong. Go to the GUI on the search head and click on App:*
-> Manage Apps
-> Install app from file
...
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

untar it and place it in the .../etc/apps/
directory
or like described here:
https://docs.splunk.com/Documentation/Splunk/7.2.5/Admin/Managingappobjects#Manage_apps_and_add-ons_...
hope it helps
