Update slpunkclouduf.spl app on Windows Universal Forwarder- What is the syntax we should use to force the update?

cpkg — Tue, 11 Oct 2022 19:07:59 GMT

Hi,

Got a message from Splunk that our universal forwarder certificate package will be expiring soon and trying to update the package following their instructions for installing the credentials package (which works on a new/clean install) it returns that we need to use the update argument:

App "100_XXXX_splunkcloud" already exists; use the "update" argument to install anyway

This is the syntax used (following Splunk documentation) that returns the message:

.\splunk install app ../etc/apps/splunkclouduf.spl -auth xxx:xxxxxxx

What is the syntax we should use to force the update? I have tried every which way that I can think of and nothing works. Thanks!

Re: Update slpunkclouduf.spl app on Windows Universal Forwarder

isoutamo — Tue, 11 Oct 2022 18:44:45 GMT

You should add

-update 1

to your

splunk install app

command

Re: Update slpunkclouduf.spl app on Windows Universal Forwarder

cpkg — Tue, 11 Oct 2022 18:48:26 GMT

@isoutamothat worked perfectly, thanks!

topic Re: Update slpunkclouduf.spl app on Windows Universal Forwarder in Getting Data In

Update slpunkclouduf.spl app on Windows Universal Forwarder- What is the syntax we should use to force the update?

Re: Update slpunkclouduf.spl app on Windows Universal Forwarder

Re: Update slpunkclouduf.spl app on Windows Universal Forwarder