All Apps and Add-ons

Splunk App for Content Packs 1.1.0 fails to install invalid app contents

terminaloutcome
Path Finder

When trying to install this app on 8.2.0 (or 8.2.1) I get the following error:

 

 

There was an error processing the upload.Invalid app contents: archive contains more than one immediate subdirectory: and DA-ITSI-CP-microsoft-exchange

 

 

This happens when uploading the downloaded .spl file or installing it automatically from the integrated installer. 

 
Labels (2)
0 Karma

yannK
Splunk Employee
Splunk Employee

The content pack app cannot be installed from the UI. Because it it not one app, but several apps compressed in the same folder.

check the docs : https://docs.splunk.com/Documentation/ITSICP/current/Config/About#Install_the_Splunk_App_for_Content...


You need to access the search-head file system, and untar the app installer in the $SPLUNK_HOME/etc/apps (or on the deployer for SHC)

0 Karma
Get Updates on the Splunk Community!

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability As businesses scale ...