All Apps and Add-ons

Having trouble updating IT Essentials Work

ArtieZ
Loves-to-Learn Everything

Hi,

 

I am trying to update IT Essentials Work (ITEW) from v4.13.0 to v4.15.0. There is no much documentation on ITEW so I am using the documentation for IT Service Intelligence (ITSI). My understanding is ITEW is the free version of ITSI without premium features.

I checked the prerequisites, updated as per the documentation 

1. Stopped the service (it is a single instance - SH)

2. Extracted the new version into $SPLUNK_HOME/etc/apps

3. Started the service

Then opened the app on the search head to proceed with the update, it passed the pre checks, got to 

 

2025-02-19 14:30:56,637+1100 process:654449 thread:MainThread INFO [itsi.migration] [itsi_migration_log:43] [info] UI: Running prechecker: EAPrechecks

 

I left it for 30 minutes or so, then checked the status by running 

 

curl -k -u admin:changeme -X GET https://localhost:8089/servicesNS/nobody/SA-ITOA/migration/info

 

and it was is_running: false

Cannot see anything alarming when I check the status. Tried several times and every time it is the same. Checked the permissions, Troubleshooting documentation, restarted the service - still could not update. Please, advise

Labels (2)
0 Karma

ArtieZ
Loves-to-Learn Everything

I'll answer to my post/question, could be helpful for someone in similar situation.

The issue was caused by 3 not existing roles which were still present in authorize.conf. Disabled those roles in authorize.conf and the update worked.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Observability Simplified: Combining User Experience, Application Performance & ...

Tech Talk Observability Simplified: Combining User Experience, Application Performance & Network ...

Event Series May & June: From Network Visibility to Service Intelligence

Unifying the Network: Moving from Alert Noise to Service Intelligence with Splunk ITSI In today’s hybrid ...

Global Splunk User Group Events: May + June 2026

Your Splunk Community Awaits: Discover Upcoming User Group Events Worldwide    Staying ahead in the fast-paced ...