Manage app and add-on objects
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
Contents
Manage app and add-on objects
When an app or add-on is created by a Splunk user, a collection of objects is created that make up the app or add-on. These objects can include views, commands, navigation items, event types, saved searches, reports, and more. Each of these objects have permissions associated with them to determine who can view or alter them. By default, the admin user has permissions to alter all the objects in the Splunk system.
- For an overview of apps, refer to "What are apps and add-ons?" in this manual.
- For more information about app and add-on permissions, refer to "App architecture and object ownership" in this manual.
- To learn more about how to create your own apps and add-ons, refer to the Developer Manual.
Manage app/add-on objects in Manager
To see and control the objects for all the apps on your your system, use Splunk Manager in Splunk Web.
- View and manipulate the objects on every page using the sorting arrows
- Filter the view to see only the objects from a given app or add-on, owned by a particular user, or that contain a certain string using the App context bar:
Search for app/add-on objects
Use the Search field on the App context bar to search for strings in any field. Wildcards are supported. Splunk searches for the string you enter in all available fields by default. To search a particular field, specify that field.
View app/add-on objects
You can use Manager to view the objects in your Splunk deployment in the following ways:
- To see all the objects for all the apps/add-ons on your system at once: Manager > All configurations.
- To see all the saved searches and report objects: Manager > Saved searches and reports.
- To see all the event types: Manager > Event types.
- To see all the field extractions: Manager > Field extractions.
- To see all the Python search command scripts: Manager > Search commands.
Note: For information about the individual search commands on the Search command page, refer to the Search Reference Manual.
Disable an app using the CLI
To disable an app via the CLI:
./splunk disable app [app_name] -auth <username>:<password>
Note: If you are running Splunk Free, you do not have to provide a username and password.
This documentation applies to the following versions of Splunk: 4.0 , 4.0.1 , 4.0.2 , 4.0.3 , 4.0.4 , 4.0.5 , 4.0.6 , 4.0.7 , 4.0.8 , 4.0.9 , 4.0.10 , 4.0.11 View the Article History for its revisions.