Solved: Error installing Splunk IT Essentials Work- Anyone...

joshiro · ‎09-12-2022

We are currently using Splunk Enterprise OnPrem 9.0.0 and when we try to install IT Essentials Work (https://splunkbase.splunk.com/app/5403/) it raises the following error: "Invalid app contents: archive contains more than one immediate subdirectory: and DA-ITSI-DATABASE".

Anyone encountered this error and managed to install IT Essentials Work?

richgalloway · ‎09-12-2022

It sounds like you're trying to install ITEW using the GUI. You should use the CLI, instead. See https://docs.splunk.com/Documentation/ITEWork/4.13.1/Install/Install

---
If this reply helps you, Karma would be appreciated.

View solution in original post

CSmoke · ‎09-25-2023

I received the same error. On Windows, I unzipped with 7-zip, copied the file to \etc\apps, restarted Splunk. App seems to work correctly.

richgalloway · ‎09-12-2022

It sounds like you're trying to install ITEW using the GUI. You should use the CLI, instead. See https://docs.splunk.com/Documentation/ITEWork/4.13.1/Install/Install

---
If this reply helps you, Karma would be appreciated.

Error installing Splunk IT Essentials Work- Anyone encountered this error and managed to install IT Essentials Work?

installation

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Automating Threat Operations and Threat Hunting with Recorded Future

Join the Conversation