It seems you were able to install the botsv1_data_set.tgz from the command line.  Can you share how you did that and from which directory?   I have tar -xvfz <filename> from the $SPLUNK_HOME/etc/apps directory and now have a botsv1_data_set folder with fully expanded data set in what appears to be a botsv1_data_set app, but I cannot search or see the app or data from my Splunk search and reporting screen.  I also cannot search the app or manage the app. ... View more

Stephanie, You state that after FTP transfer, you can install the botsv1 by command line.  I have downloaded the dataset via wget and moved to the $SPLUNK_HOME/etc/apps directory where I see ALL of the other Splunk apps. I then expand with tar -xvzf <filename> and the 'botsv1_data_set' folder is created and populated with an entire folder structure of files/data. So the app now resides in the correct folder.  When I try to find the app in Splunk with Manage Apps, it is not populated on the list.  When I try to upload or find the app, the browse window opens up to my Windows VM host and not my linux server where Splunk is installed. A search using index=botsv1 finds nothing as does a search using index=botsv1_data_set ... View more