https://community.splunk.com/t5/Splunk-Dev/How-to-import-an-addon-with-spl-or-Splunkbase-tgz-to-Splunk/m-p/348680#M5534 <P>@helpdeskrtvnoord, if you have downloaded <CODE>.tgz</CODE> file you can use <CODE>Install App From File</CODE> option to install the App/Add On. Directly browsing to Splunkbase for installation might be blocked at enterprise level. Have you tried <A href="https://docs.splunk.com/Documentation/AddOns/released/Overview/Singleserverinstall">Install App from File</A> option?</P> Wed, 14 Mar 2018 11:46:25 GMT niketn 2018-03-14T11:46:25Z https://community.splunk.com/t5/Splunk-Dev/How-to-import-an-addon-with-spl-or-Splunkbase-tgz-to-Splunk/m-p/348679#M5533 <P>Hello,</P> <P>I am trying to manually import the .spl file of a Splunk addon called 'Windows Event Log Analysis', the file has been provided on the EventID website here: <A href="http://www.eventid">http://www.eventid</A> . net/splunk_addon.asp</P> <P>I also tried downloading the addon from the Splunkbase, this provides me with a .tgz file that contains quite a bigger amount of files.<BR /> This download can be found here: <A href="https://splunkbase.splunk.com/app/3067/">https://splunkbase.splunk.com/app/3067/</A></P> <P>My question is, how would I import either of these files into my Splunk installation on Linux (Ubuntu 16.04) ?</P> <P>The reason I am trying to import the addon manually is that for some reason the Splunk Apps browser refuses my Splunk credentials, when a regular login to the Splunk.com with the same credentials does actually work.</P> <P>Thank you <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Wed, 14 Mar 2018 08:58:33 GMT https://community.splunk.com/t5/Splunk-Dev/How-to-import-an-addon-with-spl-or-Splunkbase-tgz-to-Splunk/m-p/348679#M5533 helpdeskrtvnoor 2018-03-14T08:58:33Z https://community.splunk.com/t5/Splunk-Dev/How-to-import-an-addon-with-spl-or-Splunkbase-tgz-to-Splunk/m-p/348680#M5534 <P>@helpdeskrtvnoord, if you have downloaded <CODE>.tgz</CODE> file you can use <CODE>Install App From File</CODE> option to install the App/Add On. Directly browsing to Splunkbase for installation might be blocked at enterprise level. Have you tried <A href="https://docs.splunk.com/Documentation/AddOns/released/Overview/Singleserverinstall">Install App from File</A> option?</P> Wed, 14 Mar 2018 11:46:25 GMT https://community.splunk.com/t5/Splunk-Dev/How-to-import-an-addon-with-spl-or-Splunkbase-tgz-to-Splunk/m-p/348680#M5534 niketn 2018-03-14T11:46:25Z https://community.splunk.com/t5/Splunk-Dev/How-to-import-an-addon-with-spl-or-Splunkbase-tgz-to-Splunk/m-p/348681#M5535 <P>The answer looks like this (inside a docker container running the free enterprise version)</P> <PRE><CODE>sudo -u splunk /opt/splunk/bin/splunk install app ./splunk-machine-learning-toolkit_500.tgz -update 1 </CODE></PRE> <P>See </P> <PRE><CODE>$ splunk help install </CODE></PRE> Wed, 27 Nov 2019 15:27:30 GMT https://community.splunk.com/t5/Splunk-Dev/How-to-import-an-addon-with-spl-or-Splunkbase-tgz-to-Splunk/m-p/348681#M5535 gmjATredjack 2019-11-27T15:27:30Z