App update broke the app and I can't re-install it

[feichinger]

Hey

I have a single server 8.1.2 deployment on a Windows 2016 server, with the Splunk_TA_windows app installed and that app broke when updating it to 8.1.1

Now it shows with version number "8.1.1R62a79cd" and it's knowledge objects don't seem to take effect.

I tried disabling it, stopping Splunk, removing deleting the folder (had to use takeowner.exe to be able to delete it), starting Splunk and then re-installing the app without issues - but it again shows with version 8.1.1R62a79cd and is not working. I tried this with installing from the app store, as well as downloading the app to a file and install from there.

After a while of it being re-installed, the app management page would show the link to update from this version 8.1.1R62a79cd to version 8.1.1 which acts the same way as updating other apps but it doesn't fix the issue.

What else can I try?

thanks

[scelikok]

Version 8.1.1R62a79cd Is normal, this is what it has inside Splunk_TA_windows/default/app.conf file.

[feichinger]

then maybe that's where its getting that version number from, but I don't think it supposed to show up like that in the app list.

the fact that it offers to update to 8.1.1 suggests that it's in a faulty state

[ChuckM]

I am having the same issue, has anyone found a fix for this?

[ryansaunders]

I'm seeing the same behavior with the version number showing as 8.1.1R62a79cd, though the TA still appears to be working normally for me.

I opened a support case about the version number this morning and will post back here if I hear anything.