Splunk Search

Rename an app

jec013
Explorer

Is it possible to rename an app? Would it be as easy as just renaming the directory or would this cause an issue with searches, etc. that are already defined for this app.

Tags (2)

pkumar9610
Explorer

By renaming the App, did you see any issues with Dashboards/Alerts or searches under the Renamed App ?

I see below config under the App name which I want to rename, so I guess I need to rename the folder name order_services and restart Splunk cluster. Will this work or I have to do any other changes ?

-bash-4.1$ cd /app/splunk/etc/shcluster/apps/order_services/local
-bash-4.1$ ls -ltr
total 4
-rwxr-xr-x 1 app app 28 Nov 20 2015 app.conf
-bash-4.1$ cat app.conf
[ui]

[launcher]
version =

0 Karma

Strunk
Explorer
0 Karma

Strunk
Explorer

I couldn't rename my deployed app just by changing the name of its directory. The deployment server kept failing to start after restarting splunk. I created a new barebones app, copied all of /local/ from the old app to the new app, disabled the old app, then deleted its directory. That worked okay for me.

0 Karma

ziegfried
Influencer

Things you need to consider:

  • configurations referencing the app path (eg. scripted inputs).
  • all "private" configurations of users located at at $SPLUNK_HOME/etc/users/<app>/local/<config>.conf
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Think Like an Architect: Introducing the Splunk Certified Cybersecurity Defense ...

In cybersecurity, defenders respond to threats. Architects design the systems that stop them.    As ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...