I’ve been getting deeper into Splunk and along the way I collected some quick and easy tutorials to help me do the easier things. Below is how to remove a Splunk app after it has been installed.
Splunk version: 6.3
- Log into the console and head to the /opt/splunk/etc/apps directory.
- Use the command “ls” to list what folders are in the apps folder.
- Remove the folder there. This will delete the app.
An example of what I did to remove the Fortigate App is below:
rm -rf SplunkAppForFortinet/
That’s all. Nice and easy. Let me know how things go. Cheers.