All Apps and Add-ons

Splunk App for Content Packs 1.1.0 fails to install invalid app contents

terminaloutcome
Path Finder

When trying to install this app on 8.2.0 (or 8.2.1) I get the following error:

 

 

There was an error processing the upload.Invalid app contents: archive contains more than one immediate subdirectory: and DA-ITSI-CP-microsoft-exchange

 

 

This happens when uploading the downloaded .spl file or installing it automatically from the integrated installer. 

 
Labels (2)
0 Karma

yannK
Splunk Employee
Splunk Employee

The content pack app cannot be installed from the UI. Because it it not one app, but several apps compressed in the same folder.

check the docs : https://docs.splunk.com/Documentation/ITSICP/current/Config/About#Install_the_Splunk_App_for_Content...


You need to access the search-head file system, and untar the app installer in the $SPLUNK_HOME/etc/apps (or on the deployer for SHC)

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...