https://community.splunk.com/t5/Splunk-Enterprise-Security/Enterprise-Security-app-error-while-upgrading/m-p/118534#M277 <P>So, there was no answer posted on this, but here it is:</P> <P>Most likely what is happening is that there is a very large file (most likely one of the generated lookups) in your ES install. Before performing an upgrade, ES makes a backup. It creates this backup using Python's zipfile module (I believe), which does not handle large zip files by default (see: <A href="https://docs.python.org/2/library/zipfile.html">https://docs.python.org/2/library/zipfile.html</A>). When the back fails, because it gets too big, you get the error.</P> <P>To solve, find the large file (again, usually a CSV), move it out of the apps directory, do the upgrade, move the file back to where you found it.</P> Sat, 13 Sep 2014 00:18:27 GMT dshpritz 2014-09-13T00:18:27Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Enterprise-Security-app-error-while-upgrading/m-p/118531#M274 <P>Received the error while upgrading the ESS app from 2.4 to 3.0.1. Below is the error,<BR /> "ERROR - step:upgrade|Filesize would require ZIP64 extensions"</P> <P>We are using Splunk 6 and upgraded from 5.0.4 very recently. </P> <P>Please help regarding ESS upgrade.</P> Thu, 03 Apr 2014 08:07:35 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Enterprise-Security-app-error-while-upgrading/m-p/118531#M274 udayk1 2014-04-03T08:07:35Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Enterprise-Security-app-error-while-upgrading/m-p/118532#M275 <P>Can any one update on this?</P> Thu, 03 Apr 2014 11:03:37 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Enterprise-Security-app-error-while-upgrading/m-p/118532#M275 udayk1 2014-04-03T11:03:37Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Enterprise-Security-app-error-while-upgrading/m-p/118533#M276 <P>Hi, that's a new one on me -- I'd contact support.</P> Fri, 04 Apr 2014 16:52:06 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Enterprise-Security-app-error-while-upgrading/m-p/118533#M276 jcoates_splunk 2014-04-04T16:52:06Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Enterprise-Security-app-error-while-upgrading/m-p/118534#M277 <P>So, there was no answer posted on this, but here it is:</P> <P>Most likely what is happening is that there is a very large file (most likely one of the generated lookups) in your ES install. Before performing an upgrade, ES makes a backup. It creates this backup using Python's zipfile module (I believe), which does not handle large zip files by default (see: <A href="https://docs.python.org/2/library/zipfile.html">https://docs.python.org/2/library/zipfile.html</A>). When the back fails, because it gets too big, you get the error.</P> <P>To solve, find the large file (again, usually a CSV), move it out of the apps directory, do the upgrade, move the file back to where you found it.</P> Sat, 13 Sep 2014 00:18:27 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Enterprise-Security-app-error-while-upgrading/m-p/118534#M277 dshpritz 2014-09-13T00:18:27Z