Splunk Search

Deployed Apps Search


I would like to determine how many times an app on a deployment server has been deployed.  I'm not concerned with the host information.  I'm trying to determine which Apps are no longer being used and can be archived.  I suspect it would come from the | rest command.

| rest splunk_server= /services/deployment/server/clients

I'm just not sure which fields and how to accurately calculate this. Looking for suggestions.

Labels (2)
Tags (1)
0 Karma


That information may be in the Deployment Server's logs.  Look for "DS" in the messages (I don't have access to a DS to check).

Be aware, however, that lack of downloads does not mean the app is not used.  It's possible the app hasn't changed in a while so no clients have needed to download it.

If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

SplunkTrust | Where Are They Now - Michael Uschmann

The Background Five years ago, Splunk published several videos showcasing members of the SplunkTrust to share ...

Admin Your Splunk Cloud, Your Way

Join us to maximize different techniques to best tune Splunk Cloud. In this Tech Enablement, you will get ...

Cloud Platform | Discontinuing support for TLS version 1.0 and 1.1

Overview Transport Layer Security (TLS) is a security communications protocol that lets two computers, ...