topic Re: Remote Upgrader for linux uf in Deployment Architecture

Remote Upgrader for linux uf

ShawnXie — Wed, 17 Sep 2025 10:27:52 GMT

I have already deliver the splunk remote upgrader tgz ,with depoyment server.

Can i deliver a script too to automatically start the upgrader？

Re: Remote Upgrader for linux uf

ShawnXie — Wed, 17 Sep 2025 10:34:52 GMT

I try to deliver a script use deployment server with 3 steps

1，cp the tgz to /opt

2，untar the upgrader tgz

3，run command as document say

sudo ./bin/install.sh --accept-license --create-user

The result shows step1,2 finished but have some problem with step 3

Re: Remote Upgrader for linux uf

PrewinThomas — Wed, 17 Sep 2025 11:13:50 GMT

@ShawnXie
Are you installing with root user? Also can you share your error details here.

Regards,
Prewin
If this answer helped you, please consider marking it as the solution or giving a Karma. Thanks!

Re: Remote Upgrader for linux uf

livehybrid — Wed, 17 Sep 2025 13:05:41 GMT

Hi @ShawnXie

You mentioned the first 3 steps but have you also carried out the remainder of the steps at https://help.splunk.com/en/splunk-enterprise/forward-and-process-data/splunk-remote-upgrader-for-linux-universal-forwarders/9.4/quickstart-guide/quickstart-guide such as starting the daemon

sudo systemctl start splunk-upgrader

and also deploying splunk_app_uf_remote_upgrade_linux from your DS?

Please confirm you've followed all the steps and let us know if you have any issues/errors.

🌟 Did this answer help you? If so, please consider:

Adding karma to show it was useful
Marking it as the solution if it resolved your issue
Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

Re: Remote Upgrader for linux uf

ShawnXie — Thu, 18 Sep 2025 02:07:12 GMT

thanks for your reply

Lest my previous statement was unclear and caused any misunderstanding
I run the script by inputs.conf like this:

ShawnXie_0-1758160501171.png

ShawnXie_1-1758160530902.png

ShawnXie_2-1758160945276.png

i run upgrader_install.sh manually , everything is ok the service can start

i run upgrader_install.sh by inputs.conf interval it's failed

----------------------------------------------------------------------------------------------------

I'm not sure if I need add --sudo systemctl start splunk-upgrader-- in my script additionally
because when i run --sudo ./bin/install.sh --accept-license --create-user-- ,and I run upgrader_install.sh manully the splunk-upgrader.service finally start itself.

and when install failed, I can't start service actully

ShawnXie_3-1758161165790.png

Error log like this

ShawnXie_4-1758161196887.png

Re: Remote Upgrader for linux uf

ShawnXie — Thu, 18 Sep 2025 02:18:21 GMT

thanks for your reply
and Lest my previous statement was unclear and caused any misunderstanding

i run upgrader_install.sh manually , everything is ok the service can start.

i run upgrader_install.sh by inputs.conf interval it's failed

ShawnXie_0-1758161419524.png

ShawnXie_1-1758161447938.png

ShawnXie_2-1758161617334.png

I'm not sure which user the Splunk run script uses and what permissions it has.
even though the log says :
current user is root
EUID is 0

my test environment splunkd run as root