Error installing any app

[tchristian]

When I try to install any app from the zipped file, I get an error like:
There was an error processing the upload.

Looking in the splunkd.log file I see:

ERROR ScriptRunner - stderr from 'C:\Program Files\Splunk\etc\system\bin\appinstall.py': Traceback (most recent call last):
ERROR ScriptRunner - stderr from 'C:\Program Files\Splunk\etc\system\bin\appinstall.py': File "C:\Program Files\Splunk\bin\runScript.py", line 27, in <module>
ERROR ScriptRunner - stderr from 'C:\Program Files\Splunk\etc\system\bin\appinstall.py': filename=os.environ['SPLUNK_HOME'] + '/var/log/splunk/python.log',
ERROR ScriptRunner - stderr from 'C:\Program Files\Splunk\etc\system\bin\appinstall.py': File "C:\Program Files\Splunk\Python-2.7\Lib\os.py", line 423, in __getitem__
ERROR ScriptRunner - stderr from 'C:\Program Files\Splunk\etc\system\bin\appinstall.py': return self.data[key.upper()]
ERROR ScriptRunner - stderr from 'C:\Program Files\Splunk\etc\system\bin\appinstall.py': KeyError: 'SPLUNK_HOME'
ERROR AdminManager - External handler failed with code '1' and output: ''. See splunkd.log for stderr output.

I have tried adding a SPLUNK_HOME global environment variable and rebooted the machine and that didn't help. Any advice would be greatly appreciated.

[yannK]

This is a known issue on windows with 4.3.0 and 4.3.1 :
Fix to come next version.

see http://docs.splunk.com/Documentation/Splunk/4.3.1/ReleaseNotes/Knownissues#Windows-specific_issues

• On Windows 2008, upload a new app from the manager return "error processing the upload" , changing a server to license-slave fails for "invalid master uri" and the sendemail script and email alerts fail. This occurs only if the user is not using the default server time zone in his or her profile. Workaround: change the user profile time zone to use the default server time zone, or do not specify a user time zone. (SPL-48993)

[MHibbin · Accepted solution]

tchristian,

Not a direct answer... but as a work around, you could unzip/untar (using something like WinRar/7-Zip) the file into the following location (for example, where $SPUNK_HOME is you installation location)...

$SPLUNK_HOME\etc\apps\ (This is where the Apps are stored anyway)

And the reboot Splunk, I find it's a lot quicker process than using the GUI (i'm assuming that's what you've done). I think the GUI version, does checks on the App package to check it's "in order".

Regards,

MHibbin

[tchristian]

Doesn't resolve the issue, but does work around the problem. Thanks.