Splunk Search

Rename an app

jec013
Explorer

Is it possible to rename an app? Would it be as easy as just renaming the directory or would this cause an issue with searches, etc. that are already defined for this app.

Tags (2)

pkumar9610
Explorer

By renaming the App, did you see any issues with Dashboards/Alerts or searches under the Renamed App ?

I see below config under the App name which I want to rename, so I guess I need to rename the folder name order_services and restart Splunk cluster. Will this work or I have to do any other changes ?

-bash-4.1$ cd /app/splunk/etc/shcluster/apps/order_services/local
-bash-4.1$ ls -ltr
total 4
-rwxr-xr-x 1 app app 28 Nov 20 2015 app.conf
-bash-4.1$ cat app.conf
[ui]

[launcher]
version =

0 Karma

Strunk
Explorer
0 Karma

Strunk
Explorer

I couldn't rename my deployed app just by changing the name of its directory. The deployment server kept failing to start after restarting splunk. I created a new barebones app, copied all of /local/ from the old app to the new app, disabled the old app, then deleted its directory. That worked okay for me.

0 Karma

ziegfried
Influencer

Things you need to consider:

  • configurations referencing the app path (eg. scripted inputs).
  • all "private" configurations of users located at at $SPLUNK_HOME/etc/users/<app>/local/<config>.conf
0 Karma
Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...