splunk / security_content

Splunk Security Content

Home Page:https://research.splunk.com

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[BUG] Trying to install v3.58.0 in ES after automated update prompt results in HTTP 500

ccl0utier opened this issue · comments

Issue Description

Logging into an ES instance that does not have v3.58.0 installed yet will ask the user to update ESCU. When trying to do so, an HTTP 500 error will occur and prevent installation.

image

image

Installation can still be done manually with success on Splunk Enterprise (install app from file -> upgrade) but not on Splunk Cloud. (using Find more apps -> Update also yields a HTTP 500 error).

I've reproduced this on 2 separate instances.

Spoke to @ccl0utier offline, this is an existing known-issue w/ Splunkbase.