Install Splunk IT Essentials Work on a single on-premises instance

At this time, you can't install Splunk IT Essentials Work from the Splunk Web interface.

IT Essentials Work is available on Splunkbase. Follow these steps to install the IT Essentials Work app on a single, on-premises instance. Splunk Cloud Platform customers have to work with Support to install ITE Work. To file a ticket on the Splunk Support Portal, see Support and Services.

1. Log in to splunk.com with your credentials.
2. Download the latest version of ITE Work from Splunkbase.
   1. You have to read and accept the license terms and conditions to download the app.
   2. Depending on your system, you might be prompted to keep the executable file.
3. Stop your Splunk platform. See Start and stop Splunk Enterprise for steps to do so in your specific environment.
   For example, on *nix:

   cd $SPLUNK_HOME/bin
   ./splunk stop
   

4. Extract the installation package into $SPLUNK_HOME/etc/apps. See Start and stop Splunk Enterprise for steps to do so in your specific environment.
   For example, on *nix:

   tar -xvf it-essentials-work_<latest_version>.spl -C $SPLUNK_HOME/etc/apps
   

   On Windows, rename the file extension from .spl to .tgz first and use a third-party utility to perform the extraction.

5. Restart your Splunk platform. See Start and stop Splunk Enterprise for steps to do so in your specific environment.
   For example, on *nix:

   cd $SPLUNK_HOME/bin
   ./splunk start
   

Verify installation

There are two ways to verify ITE Work is successfully installed:

1. Check that the ITE Work directories are in $SPLUNK_HOME/etc/apps. See About the ITE Work installation package for the list of directories.
2. Go to Apps > Manage Apps in Splunk Web and search for "IT Essentials Work".

Alongside ITSI or Splunk Enterprise Security

ITE Work can't be installed on the same search head as Splunk IT Service Intelligence (ITSI) or Splunk Enterprise Security.