Uninstalling the Splunk app

Completely remove the Guardium Insights for Splunk app from a Splunk deployment.

Procedure

  1. On the file system where Splunk is deployed, navigate to the Splunk home directory.
    For example, /opt/splunk or /Applications/Splunk.
  2. From the Splunk home directory, identify and delete the Guardium Insights for Splunk app subdirectory and all its contents.
    The app is located at etc/apps/gi_for_splunk.
  3. Restart Splunk by navigating to Settings > Server controls and clicking Restart Splunk.

Results

The Guardium Insights for Splunk app is removed from the Splunk deployment.