The folder name for add-ons in Splunk is the location in your file system where Splunk keeps the add-ons which you’ve installed. Add-ons are also referred to as “apps” in In Splunk and they extend the functionality of the platform by integrating with other systems or offering new capabilities. Add-on examples include pre-built dashboards, custom search commands, and custom data inputs.
After installing an add-on to Splunk, files for the add-on are kept in a certain folder on one’s file system. The location of the folder depends on the operating system and Splunk version you’re using.
For Splunk Enterprise:
- On macOS and Linux, the add-ons default folder is located in the “/opt/Splunk/etc/apps” directory.
- On Windows, the add-ons default folder is located in the “C:\Program Files\Splunk\etc\apps” directory.
You can view the path by running this command $SPLUNK_HOME/bin/splunk list app-dirs in the command line. This will assist in showing the path of every app directory in Splunk usage.
Splunk Cloud
- For Splunk Cloud, the add-ons are installed on a cloud, hence you don’t have to access the folders. Moreover, Splunk Cloud doesn’t need any on-premises installation.
Remember that the folder structure in an add-on is significant for Splunk to be capable of recognizing and using the add-on properly. Moreover, every add-on needs to have a certain set of subfolders and files including a “default” and an “app.conf” file folder.
Moreover, one can have several app directories, and every app can be in a distinct directory. For instance, you may have an app directory for every app developed in-house, and a different directory for apps downloaded from Splunkbase.
Installing Add-ons
Once you’ve located the app directory, you are all free to install an add-on by placing its contents inside a subdirectory within the application directory. The subdirectory needs to have a similar name as the add-on package. For instance, if you’re installing an add-on known as “myaddon,” you will create a directory known as “myaddon” within the application directory and place add-on package content inside that directory.
After installing add-on, you’ll require to restart Splunk for it to recognize your new add-on. You can achieve this by running the “$SPLUNK_HOME/bin/splunk restart” command in the command line.
Managing Add-ons
The moment the add-on is installed, one can manage it via the Splunk web interface by going to the “Apps” section & choosing “Manage Apps.” From here, you will view a list of every installed add-on and disable or enable them as required.
It’s also easy to manage add-ons via the command line with the help of the splunk command. For instance, you can utilize the Splunk enable application command to allow an add-on or Splunk disable application command to deactivate an add-on.
Conclusion
Add-ons are significant in the Splunk platform since they help in the functionality of the platform & offer extra data outputs, data inputs, and other features. Add-ons folder name in Splunk varies depending on the operating system and Splunk version you’re using. With Splunk Enterprise, the folder name is the “app” directory that’s located in the “etc” Splunk installation directory. With Splunk Cloud, add-ons are installed on the cloud hence you don’t have folders.