- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Team,
We are getting the below error while installing the Enterprise security App
failed to extract app from /tmp/ to /opt/splunk/var/run/splunk/bundle_tmp/ no such file or directory
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Issue has been resolved, after re downloading the ES installation package.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @isoutamo ,
do you have a running and working Splunk Enterprise environment in use before you start installing that app? yes we have active Splunk enterprise
Are you using e.g. splunk user (user which are running splunkd and own those files) and have admin rights? yes we do have
And have you check that in this filesystem is enough free space to install it? yes we have enough space
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Can you check that you could access this directory /opt/splunk/var/run/splunk/bundle_tmp/ (or at least it’s parent) as a cli use4 which you are using to install that app. Use like cd to this directory. Then check that user have also write access to this directory.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Is the files/directory owned by user which you get when running this?
ps -C splunkd -o euser,ruser,suser,fuser,group,egroup,rgroup,sgroup,f,start,args,label
Have this user write access to this directory? Can you create a file and directory on this directory as this user? Please test it as there could be some issues on FS level and the file system could be a read only mode!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
yes, its a splunk user and it has full access to the directory
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Could it be the same thing that in this case https://community.splunk.com/t5/Installation/How-to-resolve-error-when-installing-Splunk-Credentials... ?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Issue has been resolved, after re downloading the ES installation package.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Hi
do you have a running and working Splunk Enterprise environment in use before you start installing that app?
Are you using e.g. splunk user (user which are running splunkd and own those files) and have admin rights?
And have you check that in this filesystem is enough free space to install it?
r. Ismo
