IT Essentials Work installation fails

[joel_au]

Hi All,

I am running Splunk version 8.0.0 (Windows) on a single instance and want to install IT Essentials Work.

I have download the package and changed the name of it from spl to tgz and then used 7-zip to extract the files as mentioned in the documentation.

I then stop Splunk and move the folders\files to the '\splunk\etc\apps' folder and start Splunk again 

Within the Splunk Apps drop down the App does not appear when I click on Manage apps I see the app but there is no version number associated to it

Any assistance would be appreciated  

Kind Regards, 

[lowcrawl]

Does this app need a license for ITSI?   On splunkbase, it's not that clear and deprecated apps points to this as the new solution.

[LCelley]

It does not require an ITSI license. ITE is basically the free version of ITSI. It's the same code base, but they locked down a ton of features. 

[Azunai]

Hi there,

i tried the way of LCelly, and it seems to work , but the same CPU usage, it actualy capps out my machine and i have lots of file access errors in my splunkd.log

Did you find the proper way to install ITE works?

[Azunai]

After a clean OS install and clean Splunk install all issues are resolved now

[LCelley]

Did you ever make any progress with this?

I've managed to get the app installed but it gives multiple errors and says it failed to import some settings. I'm also seeing much higher CPU usage than normal. What I think I've done differently from what you listed was I changed it to end in .tgz, extracted it to a .tar file, and then extracted it again. Instead of moving the entire it-essentials-work_490 folder into /etc/apps I moved the sub folders within. I am currently running 8.2.0