An error occurred while installing the app: 500

[ralphw_SAIC]

Just upgraded Splunk from 7.0.0 to 7.1.0 and now whenever i try to update an app I receive "An error occurred while installing the app: 500" and instead of the app name in the response I get "Note: Updating None from Splunkbase might cause Splunk Enterprise to restart."

The server has internet access with no proxy. Anyone have an idea how to fix?

[sylax]

An error occurred while installing the app: 500 means that the app you are trying to install from the splunk web have a different file owner/permission from the user being used.

Change the app owner to the owner running splunkd

SSH into the server and chown -R your_splunk_user:your_splunk_group $SPLUNK_HOME/etc/apps/app_name

[niemesrw]

Seeing the same issue here but with 6.6.3. I'm in AWS with my instance, no errors within _internal I can find. I'm going to check VPC flow logs and see if it's making the connection at all.

[hortonew]

Are you upgrading the app from the left side app listing, or are you going into manage apps first, then upgrading. I noticed that the app name isn't passed along to the upgrade section if you were on the Splunk home page and trying to upgrade from that screen. You'd have to go into manage apps first, then upgrade. Let me know.

[ralphw_SAIC]

I have done it both ways. Yes, left side app listing is blank. Trying it from the manage apps does who the name. both ways fail with the same result.

[jkat54]

Is it just with one app or all apps you try to upgrade?

[ralphw_SAIC]

all apps are affected by this.

[jkat54]

Are the filesystem permissions correct in /opt/splunk/etc/apps?

Check the owner of the files, compare to the user splunk is running as.

[ralphw_SAIC]

/opt/splunk and all directories underneath are owned by the user running splunk.