manage_apps
Enable, disable, restart, or reload Splunk applications to manage app lifecycle, apply configuration changes, and troubleshoot issues in Splunk environments.
Instructions
Manage Splunk application lifecycle operations including enable, disable, restart, and reload actions. Use this tool when you need to change the state of a Splunk app, such as enabling a disabled app, restarting for configuration changes, or troubleshooting issues. This tool provides essential app management capabilities for maintaining Splunk environments, troubleshooting app issues, and controlling app availability. Operations affect app state and may require Splunk restart for some changes to take effect.
Args: action (str): Management action to perform. Valid options: - 'enable': Activate the application - 'disable': Deactivate the application - 'restart': Disable then enable the application - 'reload': Refresh application configuration app_name (str): Name of the Splunk application to manage. Examples: - 'search': Core Splunk Search app - 'splunk_monitoring_console': Monitoring Console - 'my_custom_app': Custom business applications
Response Format: Returns a dictionary with 'status' field and 'data' containing:
action: The performed action
app_name: The target application name
result: Action-specific status and configuration details
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| action | Yes | ||
| app_name | Yes |