Note: These uninstallation instructions are derived from Splunk’s official documentation on removing apps.
You may need to remove the PowerConnect Splunk app for a variety of reasons. If you do—and you are running the Splunk app on Splunk Enterprise—we first recommend that you create a backup of the configuration files and/or indexed data (see KB 146 - Backing up the PowerConnect App in Splunk Enterprise). Manual backups cannot be done in Splunk Cloud.
Removing the PowerConnect Index (Optional)
The In single instance Splunk deployments, the data index associated with the PowerConnect app is automatically removed from Splunk after uninstalling the app. However, the data is retained on the host system’s file structure. Capacity on the host can be freed by formally deleting the index through Splunk Web. Distributed deployments should retain the data, which will eventually age out and be removed by Splunk automatically.
Log into Splunk as an administrative user capable of removing index data (see Splunk documentation)
Go to Settings > Data > Indexes
...
Confirm the action by clicking “Delete” when prompted
...
Removing the PowerConnect Role (Optional)
The role created for accessing data under the index created for PowerConnect is rendered functionally useless after uninstalling the PowerConnect app. It can be removed through Splunk Web
...
Find the role(s) created for accessing the PowerConnect index
...
Click Edit > Delete
Uninstalling the PowerConnect App - Splunk Enterprise
This app can be uninstalled the same way as any Splunk app. However, it is recommended to disable the app via the Splunk Web UI if it is not needed. If uninstallation is required:
Log into the host machine as the user running Splunk.
For any machine running a desktop interface, open a CLI
Enter the following command into the CLI
...
(Optional) Additional cleanup can be performed by removing the “BNW-app-powerconnect” folder from each user directory within the Splunk file system
It is recommended to restart Splunk after performing the uninstall
Uninstalling the PowerConnect App - Splunk Cloud Platform
The PowerConnect app is treated as a “private app” on the Splunk Cloud platform and can be uninstalled through Splunk Web. See Splunk’s documentation on managing private apps in Splunk Cloud.
...