Midule 5 - Using Apps

Question 1

Where apps are installed

Answer 1

Apps are installed under SPLUNK_HOME/etc/apps

Question 2

What is splunk add on?

Answer 2

• Reusable component supporting other apps
• Often used for data collection
• Any combination of configurations, scripts, data inputs, and so on
• Does not contain Splunk Web UI components (reports or dashboards)
• Technology add-ons (TAs): specialized add-ons that help collect, transform, and normalize data feeds from specific source

Question 3

What is splunk app?

Answer 3

• Collection of configuration files, scripts, web assets, and so on
• May be focused on specific type of data, vendor, OS, industry, or business need
• May be installed on any Splunk instance
• May be included with Splunk (as a default app)