Splunk Enterprise

What are the correct usages for apps/backup and apps/restore API endpoints on Splunk Enterprise?

Karthish
Observer

I'm trying to understand the different capabilities within Splunk to see how they can be used for my advantage.

Was exploring apps_backup and apps_restore splunk capabilities to see if they can be used with API for backing up and restore of specific apps without the actual back-end access and having to replicate the "$SPLUNK_HOME/etc/" directory.

There is one mention of apps_restore within the below document mentioning it can be used on the endpoint "apps/restore":
https://docs.splunk.com/Documentation/Splunk/8.2.5/Admin/Authorizeconf

I noticed the restmap.conf also has entries for "apps/backup" and "apps/restore" but I could find no documentation on the usage of these endpoints and methods. Could someone point me in the right direction here?

Labels (1)
0 Karma
Get Updates on the Splunk Community!

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...