Not able to install any apps from Splunkbase: Invalid app contents

[gschrdr]

Hi Community,

I have a really strange issue and I'm wondering if this is not affecting quite everyone who is installing Splunkbase apps:

It happens even on a clean and freshly started Splunk:

docker run -ti --rm -e SPLUNK_START_ARGS="--accept-license" -e SPLUNK_PASSWORD="<redacted>" -p 8000:8000 splunk/splunk:latest

When I log in and want to install an App from Splunkbase:

Manage Apps -> Browse more apps -> Select ANY App -> Login to Splunkbase, Agree and Install

I get the error message:

Invalid app contents: archive contains more than one immediate subdirectory: and timeline_app 

As I said this happens with any app.

Downloading the file from Splunkbase and installing it either in the UI or the command line yields the same error.

Do you have any idea? Can you reproduce this behaviour? I don't know what could be special on my configuration.

[gschrdr]

Just an addition:
If I look into the downloaded app package and unzip it,  remove the splunkbase.manifest file and rezip it. It installs.

So to me it seems like Splunk Enterprise doesn't like app packages that contain a splunkbase.manifest at the top level but Splunkbase only offers these kind of app packages 🤷

[gschrdr]

I just found an old download of splunk-timeline-custom-visualization_161.tgz and it didn’t have this file included, while downloading the same version today always has this file included.

May this be a current issue of splunkbase.com?

[gschrdr · Accepted solution]

Update: Suddenly today the downloaded Splunkbase apps don't contain the splunkbase.manifest file anymore. So installation is working again. Must have been an issue on splunkbase.com.