All Apps and Add-ons

Error installing Splunk IT Essentials Work- Anyone encountered this error and managed to install IT Essentials Work?

joshiro
Communicator

We are currently using Splunk Enterprise OnPrem 9.0.0 and when we try to install IT Essentials Work (https://splunkbase.splunk.com/app/5403/) it raises the following error: "Invalid app contents: archive contains more than one immediate subdirectory: and DA-ITSI-DATABASE".

Anyone encountered this error and managed to install IT Essentials Work?

Labels (1)
Tags (2)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

It sounds like you're trying to install ITEW using the GUI.  You should use the CLI, instead.  See https://docs.splunk.com/Documentation/ITEWork/4.13.1/Install/Install

---
If this reply helps you, Karma would be appreciated.

View solution in original post

CSmoke
Path Finder

I received the same error. On Windows, I unzipped with 7-zip, copied the file to \etc\apps, restarted Splunk. App seems to work correctly.

richgalloway
SplunkTrust
SplunkTrust

It sounds like you're trying to install ITEW using the GUI.  You should use the CLI, instead.  See https://docs.splunk.com/Documentation/ITEWork/4.13.1/Install/Install

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...