- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Splunk App for Content Packs 1.1.0 fails to install invalid app contents
terminaloutcome
Path Finder
06-24-2021
05:11 PM
When trying to install this app on 8.2.0 (or 8.2.1) I get the following error:
There was an error processing the upload.Invalid app contents: archive contains more than one immediate subdirectory: and DA-ITSI-CP-microsoft-exchange
This happens when uploading the downloaded .spl file or installing it automatically from the integrated installer.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
yannK

Splunk Employee
08-11-2021
11:11 AM
The content pack app cannot be installed from the UI. Because it it not one app, but several apps compressed in the same folder.
check the docs : https://docs.splunk.com/Documentation/ITSICP/current/Config/About#Install_the_Splunk_App_for_Content...
You need to access the search-head file system, and untar the app installer in the $SPLUNK_HOME/etc/apps (or on the deployer for SHC)
