Splunk Search

Rename an app

jec013
Explorer

Is it possible to rename an app? Would it be as easy as just renaming the directory or would this cause an issue with searches, etc. that are already defined for this app.

Tags (2)

pkumar9610
Explorer

By renaming the App, did you see any issues with Dashboards/Alerts or searches under the Renamed App ?

I see below config under the App name which I want to rename, so I guess I need to rename the folder name order_services and restart Splunk cluster. Will this work or I have to do any other changes ?

-bash-4.1$ cd /app/splunk/etc/shcluster/apps/order_services/local
-bash-4.1$ ls -ltr
total 4
-rwxr-xr-x 1 app app 28 Nov 20 2015 app.conf
-bash-4.1$ cat app.conf
[ui]

[launcher]
version =

0 Karma

Strunk
Explorer
0 Karma

Strunk
Explorer

I couldn't rename my deployed app just by changing the name of its directory. The deployment server kept failing to start after restarting splunk. I created a new barebones app, copied all of /local/ from the old app to the new app, disabled the old app, then deleted its directory. That worked okay for me.

0 Karma

ziegfried
Influencer

Things you need to consider:

  • configurations referencing the app path (eg. scripted inputs).
  • all "private" configurations of users located at at $SPLUNK_HOME/etc/users/<app>/local/<config>.conf
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

How much can you really learn in 3 minutes?

Observability can certainly be hard to understand – there's a lot of jargon and buzzwords and it seems to ...

Event Series: The Agentic SOC: Trust Before Autonomy

AI is fundamentally changing security operations, but true progress requires more than just automation—it ...

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...