Uninstall Splunk Asset and Risk Intelligence
Note:
Splunk Asset and Risk Intelligence is not compatible with Splunk Enterprise 9.1.2 due to known issues SPL-237796, SPL-248319 where search results in "results" have more rows than expected. Upgrade to Splunk Enterprise 9.1.3 to use Splunk Asset and Risk Intelligence.
To uninstall Splunk Asset and Risk Intelligence, do the following:
Prerequisite
If you activated the integration with Splunk Enterprise Security, you must remove the integration to uninstall Splunk Asset and Risk Intelligence. To remove the integration, complete the following steps:
- In Splunk Asset and Risk Intelligence, select Admin.
- Select Integrations and then Enterprise Security configuration.
- Select Remove integration.
- Confirm that you want to remove the integration by selecting Remove.
Steps
- Uninstall the app from your Splunk platform search head or search head cluster.
- If you installed the app on Splunk Enterprise, see Manage app and add-on objects in the Splunk Enterprise Admin Manual.
- If you installed the app on Splunk Cloud Platform, see Manage Splunkbase apps in Splunk Cloud Platform in the Admin Config Service Manual.
- Remove the indexes.
- If you installed the app on Splunk Enterprise, see Remove indexes and indexed data in the Splunk Enterprise Managing Indexers and Clusters of Indexers manual.
- If you installed the app on Splunk Cloud Platform, see Delete index data and the index from Splunk Cloud Platform in the Splunk Cloud Platform Admin Manual.