All Apps and Add-ons

Search Activity 2.2.9: Unable to update the app. Is there an issue with the tar file?

mfrost8
Builder

Maybe I'm mistaken, but it seems as if there's some issue with the latest v2.2.9 Search Activity app, specifically with the tar file.

I noticed that when I tried to update it via the link in the Splunk UI, it spins for a while then gives me a 500 error.

When I downloaded the tar file itself and try to extract it as an ordinary user on a 64-bit Linux server, it gives me a permission denied on every file (and yes, I'm doing this in a directory where I have permissions and on a filesystem that is not full).

When I attempt to look through what was extracted, I see a few files and directories, but then some look like

> ./search_activity/static: ls: cannot
> access
> ./search_activity/static/appIconAlt.png:
> Permission denied ls: cannot access
> ./search_activity/static/appLogo.png:
> Permission denied ls: cannot access
> ./search_activity/static/appLogo_2x.png:
> Permission denied ls: cannot access
> ./search_activity/static/appIconAlt_2x.png:
> Permission denied ls: cannot access
> ./search_activity/static/appIcon.png:
> Permission denied ls: cannot access
> ./search_activity/static/appIcon_2x.png:
> Permission denied total 0
> -????????? ? ? ? ?            ? appIcon_2x.png
> -????????? ? ? ? ?            ? appIconAlt_2x.png
> -????????? ? ? ? ?            ? appIconAlt.png
> -????????? ? ? ? ?            ? appIcon.png
> -????????? ? ? ? ?            ? appLogo_2x.png
> -????????? ? ? ? ?            ? appLogo.png

I'm guessing that there's an issue with the way this tar file was created as I've never seen an issue with any tar file like this one before.
thanks

1 Solution

fabioarcidiacon
Engager

The problem is that in the tar some folders are missing the execution flag. I've extracted the tar, added the missing permissions and rebuild the tar like this:

tar -zxvf search-activity_229.tgz
find search_activity/ -type d -exe chmod +x {} \;
tar -zcvf search-activity_229.tgz search_activity/
splunk install app search-activity_229.tgz -update 1 -auth <username>:<password>

View solution in original post

David
Splunk Employee
Splunk Employee

Super impressed with Fabioarcidiacono's answer!

I did also provide an updated release (2.2.10) just now that fixed the underlying problem. Sorry everyone for the issue!

fabioarcidiacon
Engager

The problem is that in the tar some folders are missing the execution flag. I've extracted the tar, added the missing permissions and rebuild the tar like this:

tar -zxvf search-activity_229.tgz
find search_activity/ -type d -exe chmod +x {} \;
tar -zcvf search-activity_229.tgz search_activity/
splunk install app search-activity_229.tgz -update 1 -auth <username>:<password>

mfrost8
Builder

I had to modify that slightly to work on my system, but this got it to work. Hopefully the author notices this and makes the fix in the official version.

Thanks very much!

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...