facing issue while installing python for scientific computing on splunk enterprise

[Piyush_Sharma37]

hello everyone, myself Piyush and I'm new to this Splunk environment. I was getting along with MLTK and Python for scientific computing to develop something for the ongoing Splunk hackathon, but while I have tried several times to install it, it still shows me an XML screen saying the file size is too big. I even deleted and re-downloaded the Python file and uploaded it. However, the issue still persists and while other add ons like MLTK,etc got installed just fine. I'm on Windows and I don't have a clue how to move forward from here as I am learning about the splunk environment on the go.

[livehybrid]

Hi @Piyush_Sharma37 

Increase the maximum upload size limit in your Splunk Enterprise configuration.

1. Navigate to $SPLUNK_HOME/etc/system/local/ on your Splunk server.
2. Create or edit the web.conf file.

3. Add or modify the [settings] stanza to include max_upload_size:

   [settings]
   max_upload_size = 2048

   Set to a value in MB larger than the app file size, e.g., 2048 for 2GB

4. Save the web.conf file.

5. Restart Splunk Enterprise for the changes to take effect.
6. Attempt the installation of the "Python for Scientific Computing" app again through the UI.

Splunk has a default limit on the size of apps that can be uploaded via the web interface. The "Python for Scientific Computing" app package is often larger than this default limit, causing the "file size is too big" error. Increasing the max_upload_size parameter in web.conf allows Splunk to accept larger app files during installation.

• Ensure you have sufficient disk space on the Splunk server where the app will be installed and unpacked.

• Restarting Splunk is mandatory for the configuration change to be applied.

• web.conf documentation

You can also install it from the command line using:

./splunk install app <path/packagename>

Depending on your architecture and configuration it may be that you need to install this via your Splunk Deployment server rather than a manual install. 
Please review the installation docs for more information: https://docs.splunk.com/Documentation/MLApp/5.5.0/User/Installandconfigure

🌟 Did this answer help you? If so, please consider:

• Adding karma to show it was useful
• Marking it as the solution if it resolved your issue
• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

[kiran_panchavat]

@Piyush_Sharma37 

Splunk has a default maximum upload size of 500MB for files uploaded via the web interface. You can increase this limit by editing the web.conf file.

Navigate to the web.conf file in your Splunk installation directory (usually found in C:\Program Files\Splunk\etc\system\local).

Add or modify the following line under the [settings] stanza:

[settings]
max_upload_size = 1000

Save the file and restart Splunk.

 web.conf - Splunk Documentation

Manual Install:

• If increasing the upload limit doesn’t work or you prefer a direct approach, manually install the PSC add-on. 
• Download the PSC add-on (.tar.gz file) from Splunkbase. 
• Extract the .tar.gz file to $SPLUNK_HOME/etc/apps/ (e.g., C:\Program Files\Splunk\etc\apps\).
• Ensure the extracted folder is named appropriately.
• Restart Splunk.
• Verify the installation in Splunk Web under Apps > Manage Apps; PSC should appear in the list.