hi splunkitsipoc, usually you should be able to find it at /opt/splunk/etc/apps/ but it depends if Splunk was actually installed in /opt . Login as the user that runs Splunk and if you are lucky enough, this user has the Splunk environments variables setup, then you can just do a cd $SPLUNK_HOME/etc/apps and you will be in the right directory. If that does not work try running this command find / -type d -name splunk to find the location of the installed Splunk. Hope this helps ... cheers, MuS ... View more