All Apps and Add-ons

Having trouble updating IT Essentials Work

ArtieZ
Loves-to-Learn Everything

Hi,

 

I am trying to update IT Essentials Work (ITEW) from v4.13.0 to v4.15.0. There is no much documentation on ITEW so I am using the documentation for IT Service Intelligence (ITSI). My understanding is ITEW is the free version of ITSI without premium features.

I checked the prerequisites, updated as per the documentation 

1. Stopped the service (it is a single instance - SH)

2. Extracted the new version into $SPLUNK_HOME/etc/apps

3. Started the service

Then opened the app on the search head to proceed with the update, it passed the pre checks, got to 

 

2025-02-19 14:30:56,637+1100 process:654449 thread:MainThread INFO [itsi.migration] [itsi_migration_log:43] [info] UI: Running prechecker: EAPrechecks

 

I left it for 30 minutes or so, then checked the status by running 

 

curl -k -u admin:changeme -X GET https://localhost:8089/servicesNS/nobody/SA-ITOA/migration/info

 

and it was is_running: false

Cannot see anything alarming when I check the status. Tried several times and every time it is the same. Checked the permissions, Troubleshooting documentation, restarted the service - still could not update. Please, advise

Labels (2)
0 Karma

ArtieZ
Loves-to-Learn Everything

I'll answer to my post/question, could be helpful for someone in similar situation.

The issue was caused by 3 not existing roles which were still present in authorize.conf. Disabled those roles in authorize.conf and the update worked.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...