topic Re: Splunk upgradation method in Deployment Architecture

Splunk upgradation method

sanjubaba — Sat, 10 Oct 2020 01:32:23 GMT

If Splunk enterprise setup is done using .deb package at first place. Can the Splunk enterprise version upgradation be done by tar method afterwards?

Re: Splunk upgradation method

isoutamo — Sat, 10 Oct 2020 06:12:30 GMT

Yes you can do it, but then your package manager is not aware of this new version. That can be an issue or not? Anyhow you must document that so that other administrators are also aware of it. Personally I want always to use same method to update that has used installation, it generates less issues/hassle later on.
r.ismo

Re: Splunk upgradation method

sanjubaba — Sat, 10 Oct 2020 07:26:32 GMT

@isoutamo thanks for your reply.

Can you help me out on how to identify the previously installed version of Splunk enterprise on Ubuntu Linux machine?

Re: Splunk upgradation method

isoutamo — Sat, 10 Oct 2020 07:43:13 GMT

Check with package manager which version is installed and then verify what splunk said. You could found that e.g. manifest file on splunk home or from internal logs or splunk -version
https://docs.splunk.com/Documentation/Splunk/8.0.6/Troubleshooting/CheckSplunkversion
R. Ismo

Re: Splunk upgradation method

sanjubaba — Sat, 10 Oct 2020 08:47:06 GMT

@isoutamo thank you for your Reply.

And how to identify the installation method which was followed earlier during Splunk enterprise installation. Whether it's done by using package or tar method?

Re: Splunk upgradation method

isoutamo — Sat, 10 Oct 2020 09:00:25 GMT

https://docs.splunk.com/Documentation/Splunk/8.0.6/Installation/InstallonLinux
dpkg —status splunk shows if it has installed with package manager and which version it was.