I'm trying to upgrade the Splunk Add-on for McAfee. I the get the following error
An error occurred while installing the app: 400
I also tried Installing the add-on from file with the option "Upgrade app. Checking this will overwrite the app if it already exists", but I get another error:
There was an error processing the upload
What operating system are you using? One suggestion: disable the add-on first, then try upgrading and see if that works. This was a workaround for another add-on that had issues with upgrading.
I ended up extracting the new install file to the splunk/etc/apps/Splun_TA_mcafee directory and restarting splunk. The update was successful, but it would be nice to be able to update this via the UI or Command, both of those were fails.