If I want to install the new IT Essential Work app : https://splunkbase.splunk.com/app/5403/
But when installing from the UI, the .spl upload returns an error.
This is because the App is indeed a package with several apps, that have to be installed manually on the file system, like ITSI.
Indeed, the app cannot be installed from the UI.
You need to follow the procedure in the docs : https://docs.splunk.com/Documentation/ITEWork/latest/Install/Install
- you need SSH access to the SH, and untar the installer in the $SPLUNK_HOME/etc/apps folder
- or a way to push the apps from the deployer (in case of SHcluster)
If you want one day to have an UI installer, please vote for that IDEA https://ideas.splunk.com/ideas/EID-I-982
Indeed, the app cannot be installed from the UI.
You need to follow the procedure in the docs : https://docs.splunk.com/Documentation/ITEWork/latest/Install/Install
- you need SSH access to the SH, and untar the installer in the $SPLUNK_HOME/etc/apps folder
- or a way to push the apps from the deployer (in case of SHcluster)
Will the instructions for a distributed environment be coming?
Great question, please use the "feedback" post on the bottom of the doc page to request an improvement of the docs.
The SHC install setup was added to the docs :