NOTE: This topic is a work-in-progress.
This topic provides and overview of applications and how you can use them. For Splunk applications and information on how to build your own, refer to the Apps Wiki. For existing applications, browse SplunkBase.
What are applications?A Splunk application can be as simple as a collection of one or more event type definitions, searches, and/or saved searches. Or, it can be as complex as an entirely new program using Splunk's REST API.
Where can you find them?When you install Splunk, a number of applications are installed by default (but not necessarily enabled, we'll get to that later). You can see them by launching Splunk Web and navigating to the Admin>Applications page. In particular, the Splunk forwarder, light forwarder, and desktop configuration applications are listed here. You can find and install more Splunk applications from this page.
Also, you can access all available Splunk applications directly from SplunkBase.
You can navigate to the Admin > Applications page in Splunk Web and see what applications are enabled for your Splunk installation, or you can use the CLI to check to see if a particular application is installed by going to $SPLUNK_HOME/bin and typing:
./splunk display <application name>
Each Splunk application that is listed in the Admin>Applications page has its own directory under $SPLUNK_HOME/etc/apps/, where SPLUNK_HOME is the directory into which you installed Splunk. Each Splunk application can have a setup.conf file to specify how that application interacts with other Splunk applications.
How do you install them?Important: Splunk's directory structure changed between versions 3.2 and 3.3. If you are downloading an application from SplunkBase, you may have to upgrade to 3.3. Contact Splunk support for guidance.
Comments
No comments have been submitted.