Getting Data In

Is there a way to disable a Splunk app using REST and CURL command?

dineshraj9
Builder

I want to disable a Splunk app using curl command and then enable it back. Is there a way to do it without restarting Splunk?

I couldn't find anything in the REST reference manual for Apps - http://docs.splunk.com/Documentation/Splunk/6.5.1/RESTREF/RESTapps

0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

That's not documented there because it's documented more generally here: http://docs.splunk.com/Documentation/Splunk/6.5.1/RESTUM/RESTusing#Enable_and_disable_endpoint

Same principle applies for all disable-able objects.

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

That's not documented there because it's documented more generally here: http://docs.splunk.com/Documentation/Splunk/6.5.1/RESTUM/RESTusing#Enable_and_disable_endpoint

Same principle applies for all disable-able objects.

martin_mueller
SplunkTrust
SplunkTrust

In an SHC you should distribute this via the SHC deployer.

0 Karma

dineshraj9
Builder

The endpoint works for disabling an app on the search head where I issue the CURL command, but the changes don't get replicated to any of the other peers in the SHC.

Is there some way I can disable it across all peers?
Do I need to issue the curl command on all peers?

0 Karma

woodcock
Esteemed Legend

You can disable REST for the entire node but I don't think you can selectively.

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...