We are currently using Splunk Enterprise OnPrem 9.0.0 and when we try to install IT Essentials Work (https://splunkbase.splunk.com/app/5403/) it raises the following error: "Invalid app contents: archive contains more than one immediate subdirectory: and DA-ITSI-DATABASE".
Anyone encountered this error and managed to install IT Essentials Work?
It sounds like you're trying to install ITEW using the GUI. You should use the CLI, instead. See https://docs.splunk.com/Documentation/ITEWork/4.13.1/Install/Install
I received the same error. On Windows, I unzipped with 7-zip, copied the file to \etc\apps, restarted Splunk. App seems to work correctly.
It sounds like you're trying to install ITEW using the GUI. You should use the CLI, instead. See https://docs.splunk.com/Documentation/ITEWork/4.13.1/Install/Install