This documentation applies to the following versions of Splunk: 4.0 , 4.0.1 , 4.0.2 , 4.0.3 , 4.0.4 , 4.0.5 , 4.0.6
You can find new Apps on Splunk.com Also, all Apps available on Splunk.com also show up in Launcher, so you can download and install Apps directly from within Splunk.
When you log into Splunk Web, you see the App Launcher by default. If this has been changed, you can get back to the Launcher from the App menu in the upper right hand of the main page of any Splunk-provided App.
If your Splunk server or your client machine are connected to the internet, you can download Apps directly from Launcher, within Splunk.
1. From the Launcher, click on the Browse Apps tab. This will connect you to the Splunk App Store, where you can browse for and download other Apps that are available for this version of Splunk.
2. Pick the App you want and select Install App. You can also Download App if you want to install by hand.
3. You will be prompted to log in with your Splunk.com username and password (note that this is not your Splunk username and password).
4. Your App is now installed and if it has a Web GUI component (some Apps contain only knowledge objects like event type definitions), you can navigate to it from Launcher.
If your Splunk server and client do not have internet connectivity, you must download Apps from SplunkBase and copy them over to your server.
1. From a computer connected to the internet, browse the Splunk App Store for the App you want.
2. Download the App.
3. Copy this App over to your Splunk server.
4. Put the App in your $SPLUNK_HOME/etc/apps directory.
5. Untar and ungzip your App (run tar -xvf or use a tool that will untar and ungzip files). Note that Splunk Apps are packaged with a .SPL extension although they are just tarred and gzipped. You may need to force your tool to recognize this extension.
6. You may need to restart Splunk depending on the contents of the App.
7. Your App is now installed and will be available from Launcher (if it has a Web GUI component).