I'm using Splunk Enterprise 6.6.3.
I've used the Update link on the Apps dashboard of my master to perform the upgrade of Palo Alto Networks App to version 6.0.0 from 5.4.2
I've actually done this procedure a couple of times. After restarting the Splunk service the I see a banner displayed when I re-login saying . . . *'App "Palo Alto Networks" was installed successfully*
However, back at the main page the Palo Alto Networks App still shows the Update button below it.
/etc/apps/SplunkforPaloAltoNetworks/Readme.md shows App Version 6.0.0 so the files are in place. But if I open the App from the dashboard and click About at the bottom it shows 5.4.2
The add-on Splunk_TA_paloalto is upgraded to 6.0.0 too.
The issue is resolved but I had to completely remove and reinstall the app rather than upgrade
↧