All Apps and Add-ons

IP Reputation app directory structure error.

prithvi08
Engager

I recently tried to install the ip reputation application to spunk enterprise. i had downloaded the .tgz file from splunkbase and tried to install by uploading to the file. i received the following error.

"There was an error processing the upload.Invalid app contents: archive contains more than one immediate subdirectory: and ipreputation"

so i extracted the file and checked that there was a another folder called PaxHeader as well as a file ._ipreputation under the ipreputation main directory. when i moved this file and folder into the ipreputation folder,the app seemed to be installed. But the threatscore was not displayed eventhough i had entered the key in the .py file. Please advise. I had re downloaded and checked for the MD5 checksum, it seems to be alright. but the app directory structure seems to have an error.

0 Karma
1 Solution

mayurr98
Super Champion

hey
You can't install this app via the GUI as the tgz file contains multiple apps (dependencies). You'll need to extract the tgz file within /opt/splunk/etc/apps (if not using a cluster) and restart splunk.

I hope this helps you!

View solution in original post

prithvi08
Engager

Thank you,seems to have installed fine.

0 Karma

mayurr98
Super Champion

you are welcome pls upvote as well!

0 Karma

mayurr98
Super Champion

hey
You can't install this app via the GUI as the tgz file contains multiple apps (dependencies). You'll need to extract the tgz file within /opt/splunk/etc/apps (if not using a cluster) and restart splunk.

I hope this helps you!

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Catalog Is Now Generally Available on Splunk Cloud Platform

A Unified View of Your Data  Security logs, application events, business data, and historical telemetry often ...

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner   Watch on demand us for a demo-driven ...