I found a rule for this condition. Splunk seems doesn't give the right control for upgrate of *NIX app (for 4.2) or any pre-existence app. If you install an new apps , such as *NIX or any app with setup.xml, It works fine ,but not for upgrate One. ... View more

You can try fallow step: /opt/splunk/bin/splunk stop [root@localhost default]# cat app.conf [install] state = enabled is_configured = true build = 96252 [package] id = unix [ui] is_visible = true label = *NIX [launcher] author=Splunk, Inc. description=This is a useful app for helping monitor, manage, and troubleshoot *nix platforms. This app comes with set of scripted inputs for collecting CPU, disk, I/O, memory, log, configuration, and user info. It also provides convenient dashboards, form searches, and alerts to make getting started with Splunk a breeze. version = 4.2.0 3. [root@localhost default]# cat inputs.conf [script://./bin/vmstat.sh] interval = 60 sourcetype = vmstat source = vmstat index = os disabled = 1 .. .. 4. /opt/splunk/bin/splunk start ... View more

Hi amitsehgal: I send the scripts to you. ... View more