Why am I getting a "500 Internal Server Error" trying to upgrade Splunk DB Connect to 2.3.0?

[fpiella]

When I try to update to 2.3.0 I get an error:

500 Internal Server Error

Return to Splunk home page

View more information about your
request (request ID =
57a858aadd43f4908) in Search

This page was linked to from
http://localhost:8000/splunkserver/en-US/manager/system/appsremote?offset=0&count=20&order=relevance....

I try to update from the Update button through BROWSE MORE APPS menu option
and also from MANAGE APPS option

Is there any issue on that update process?

[jkat54]

See this for a possible solution:
https://answers.splunk.com/answers/387455/having-hundreds-of-sqlitepersistentstorageimp-erro-1.html

[fpiella]

Thanks, this answer solved the errors related the SQLPersistentStorage...

But I cannot update DBConnect. Still getting the same message.

Any idea? Can I uninstall this app and begin from zero?

[jkat54]

I suppose so. Technically all an upgrade does is a recursive copy on top of what is already there. so maybe try that first.

Something like this should do the trick if executed by the user that owns the directory:

tar -zxvf dbconnect.tar.gz -C /opt/splunk/etc/apps

[fpiella]

Here you have two PDFs with the content of index=_internal log_level=error and another with log_level=warn*link text

[fpiella]

I hope you can see the errors now

[jkat54]

All I see is the warn* events

[jkat54]

Oh I see the error.pdf link now. See my answer below.

[jkat54]

Whats in index=_internal log_level=error or log_level=warn*?

[fpiella]

I have attached two files answering your question