I have just tried to increase the upload max size as described here but when attempting to install I get the same error message. Step 2. Install Splunk Enterprise Security The installer dynamically detects if you're installing in a single search head environment or search head cluster environment. The installer is also bigger than the default upload limit for Splunk Web. Increase the Splunk Web upload limit to at least 2 GB by creating a file called $SPLUNK_HOME/etc/system/local/web.conf with the following stanza. [settings] max_upload_size = 2048 To restart Splunk from the Splunk toolbar, select Settings > Server controls and click Restart Splunk. On the Splunk toolbar, select Apps > Manage Apps and click Install App from File. Click Choose File and select the Splunk Enterprise Security product file. Click Upload to begin the installation. Click Set up now to start setting up Splunk Enterprise Security
... View more
