All Apps and Add-ons

Splunk App for Content Packs 1.1.0 fails to install invalid app contents

terminaloutcome
Path Finder

When trying to install this app on 8.2.0 (or 8.2.1) I get the following error:

 

 

There was an error processing the upload.Invalid app contents: archive contains more than one immediate subdirectory: and DA-ITSI-CP-microsoft-exchange

 

 

This happens when uploading the downloaded .spl file or installing it automatically from the integrated installer. 

 
Labels (2)
0 Karma

yannK
Splunk Employee
Splunk Employee

The content pack app cannot be installed from the UI. Because it it not one app, but several apps compressed in the same folder.

check the docs : https://docs.splunk.com/Documentation/ITSICP/current/Config/About#Install_the_Splunk_App_for_Content...


You need to access the search-head file system, and untar the app installer in the $SPLUNK_HOME/etc/apps (or on the deployer for SHC)

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...