Why did I get the following error after installing Splunk App for IT Service Intelligence: "There was an error processing the upload"

[chinuakatchy]

I downloaded the SPl file but I was unable to install it. I got the following response: "There was an error processing the upload. Invalid app contents: archive contains more than one immediate subdirectory: and SA-ITSI-MetricAD"

[chinuakatchy]

Yes I am trying to install it through the GUI. I am running Splunk 7.1.2. and Splunk ITSI version 3.1.4.
Please is there any guide for installing it via the CLI?

[kmorris_splunk]

Are you trying to install it through the GUI? ITSI needs to be installed from the command line. It contains several other app directories.

[chinuakatchy]

Yes I am trying to install it through the GUI. Please is there any guide for installing it via the CLI?

[kmorris_splunk]

Install ITSI on a single instance
Install ITSI on a single Splunk Enterprise instance. In a single-instance deployment, a single Splunk Enterprise instance serves as both search head and indexer.

You must install ITSI by extracting the ITSI installation package. ITSI does not support installation using the app manager in Splunk Web or using the splunk install app command at the command line.

Log in to splunk.com with your Splunk.com user name and password.
Download the latest Splunk IT Service Intelligence product.
Stop splunk. For example:
cd $SPLUNK_HOME/bin
./splunk stop
Extract the ITSI installation package into $SPLUNK_HOME/etc/apps. For example:
tar -xvf splunk-it-service-intelligence_.spl -C $SPLUNK_HOME/etc/apps
On Windows, rename the file extension from .spl to .tgz first and use a third-party utility like 7-Zip to perform the extraction.

Start splunk. For example:
cd $SPLUNK_HOME/bin
./splunk start

[mstjohn_splunk]

Hi @chinuakatchy,

Could you provide us more context on your install? For instance, what version of Splunk are you using, etc. You have a much better chance of getting your question answered if you provide more information about your issue. Plus, it will help guide future community users who are facing a similar problem.

[chinuakatchy]

I am running Splunk 7.1.2. and Splunk ITSI version 3.1.4.