Solved: Error installing Splunk IT Essentials Work- Anyone...

joshiro · ‎09-12-2022

We are currently using Splunk Enterprise OnPrem 9.0.0 and when we try to install IT Essentials Work (https://splunkbase.splunk.com/app/5403/) it raises the following error: "Invalid app contents: archive contains more than one immediate subdirectory: and DA-ITSI-DATABASE".

Anyone encountered this error and managed to install IT Essentials Work?

richgalloway · ‎09-12-2022

It sounds like you're trying to install ITEW using the GUI. You should use the CLI, instead. See https://docs.splunk.com/Documentation/ITEWork/4.13.1/Install/Install

---
If this reply helps you, Karma would be appreciated.

View solution in original post

CSmoke · ‎09-25-2023

I received the same error. On Windows, I unzipped with 7-zip, copied the file to \etc\apps, restarted Splunk. App seems to work correctly.

richgalloway · ‎09-12-2022

It sounds like you're trying to install ITEW using the GUI. You should use the CLI, instead. See https://docs.splunk.com/Documentation/ITEWork/4.13.1/Install/Install

---
If this reply helps you, Karma would be appreciated.

Error installing Splunk IT Essentials Work- Anyone encountered this error and managed to install IT Essentials Work?

installation

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Best Practices: Splunk auto adjust pipeline queue

Laser Bananas and Edge Hubs: Exploring Operational Technology (OT) Data Through a ...

Event Series: Mastering AI Tokenomics and Splunk Agent Observability

Join the Conversation