The App Vault • Room 2

Installing and Managing Apps

You can install apps through Splunk Web (Apps > Find More Apps), by uploading a .tgz/.tar.gz file, or via the CLI with the splunk install app command.

Apps are installed to $SPLUNK_HOME/etc/apps/. Each app has its own directory with default/ and local/ subdirectories for configurations.

App permissions control who can access them: private (only the owner), app-level (users in that app context), or global (accessible from all apps).

Install app via CLI

./splunk install app /path/to/app.tgz
./splunk restart

Knowledge Check

Prove your understanding to clear the room (Rewards XP)

❤️❤️❤️

Question 1 of 2

Where are Splunk apps installed on the filesystem?

A$SPLUNK_HOME/bin/apps/

B$SPLUNK_HOME/etc/apps/

C/opt/apps/

D$SPLUNK_HOME/var/apps/