$npx -y skills add grandcamel/Splunk-Assistant-Skills --skill splunk-appSplunk application management.
| 1 | # splunk-app |
| 2 | |
| 3 | Splunk application management. |
| 4 | |
| 5 | ## Purpose |
| 6 | |
| 7 | Install, uninstall, enable, disable, and manage Splunk applications. |
| 8 | |
| 9 | ## Risk Levels |
| 10 | |
| 11 | | Operation | Risk | Notes | |
| 12 | |-----------|------|-------| |
| 13 | | List apps | - | Read-only | |
| 14 | | Get app details | - | Read-only | |
| 15 | | Enable app | ⚠️ | Easily reversible | |
| 16 | | Disable app | ⚠️ | Easily reversible | |
| 17 | | Install app | ⚠️⚠️ | May affect system behavior | |
| 18 | | Uninstall app | ⚠️⚠️⚠️ | **IRREVERSIBLE** - app files deleted | |
| 19 | |
| 20 | ## Triggers |
| 21 | |
| 22 | - "app", "application", "install" |
| 23 | - "package", "addon" |
| 24 | |
| 25 | ## CLI Commands |
| 26 | |
| 27 | | Command | Description | |
| 28 | |---------|-------------| |
| 29 | | `app list` | List installed apps | |
| 30 | | `app get <name>` | Get app details | |
| 31 | | `app install <file>` | Install app from package file (.tar.gz, .tgz, .spl) | |
| 32 | | `app uninstall <name>` | Remove app | |
| 33 | | `app enable <name>` | Enable disabled app | |
| 34 | | `app disable <name>` | Disable app | |
| 35 | |
| 36 | ## Options |
| 37 | |
| 38 | | Option | Commands | Description | |
| 39 | |--------|----------|-------------| |
| 40 | | `-o`, `--output` | list, get | Output format (text, json) | |
| 41 | | `-n`, `--name` | install | App name (overrides name from package) | |
| 42 | | `--update/--no-update` | install | Update if app exists | |
| 43 | | `-f`, `--force` | uninstall | Skip confirmation | |
| 44 | |
| 45 | ## Examples |
| 46 | |
| 47 | ```bash |
| 48 | # List installed apps |
| 49 | splunk-as app list |
| 50 | splunk-as app list -o json |
| 51 | |
| 52 | # Get app details |
| 53 | splunk-as app get search |
| 54 | splunk-as app get search --output json |
| 55 | |
| 56 | # Install app (supports .tar.gz, .tgz, .spl formats) |
| 57 | splunk-as app install my_app.tgz |
| 58 | splunk-as app install my_app.spl --update |
| 59 | splunk-as app install package.tar.gz --name custom_app_name |
| 60 | |
| 61 | # Uninstall app |
| 62 | splunk-as app uninstall my_app |
| 63 | splunk-as app uninstall my_app --force |
| 64 | |
| 65 | # Enable app |
| 66 | splunk-as app enable my_app |
| 67 | |
| 68 | # Disable app |
| 69 | splunk-as app disable my_app |
| 70 | ``` |
| 71 | |
| 72 | ## API Endpoints |
| 73 | |
| 74 | - `GET/POST /services/apps/local` - List/Install |
| 75 | - `GET/POST/DELETE /services/apps/local/{name}` - CRUD |
| 76 | - `POST /services/apps/local/{name}/package` - Export |