Splunk Search

Rename an app

jec013
Explorer

Is it possible to rename an app? Would it be as easy as just renaming the directory or would this cause an issue with searches, etc. that are already defined for this app.

Tags (2)

pkumar9610
Explorer

By renaming the App, did you see any issues with Dashboards/Alerts or searches under the Renamed App ?

I see below config under the App name which I want to rename, so I guess I need to rename the folder name order_services and restart Splunk cluster. Will this work or I have to do any other changes ?

-bash-4.1$ cd /app/splunk/etc/shcluster/apps/order_services/local
-bash-4.1$ ls -ltr
total 4
-rwxr-xr-x 1 app app 28 Nov 20 2015 app.conf
-bash-4.1$ cat app.conf
[ui]

[launcher]
version =

0 Karma

Strunk
Explorer
0 Karma

Strunk
Explorer

I couldn't rename my deployed app just by changing the name of its directory. The deployment server kept failing to start after restarting splunk. I created a new barebones app, copied all of /local/ from the old app to the new app, disabled the old app, then deleted its directory. That worked okay for me.

0 Karma

ziegfried
Influencer

Things you need to consider:

  • configurations referencing the app path (eg. scripted inputs).
  • all "private" configurations of users located at at $SPLUNK_HOME/etc/users/<app>/local/<config>.conf
0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...