topic Re: Splunk Universal Forwarder Upgrade in Getting Data In

Splunk Universal Forwarder Upgrade

ram254481493 — Thu, 19 Mar 2020 20:20:34 GMT

Hi ,

I am looking for some information on Splunk Universal forwarder upgrade. We have 3000 + forwarders that needs a mass upgrade. What are the things do i need to consider for upgrading like backups etc ? i am looking for some scripts for linux system to remote upgrade the forwarders. Please let me know if any one have some scripts available. I am looking for the same info for windows as well.

Re: Splunk Universal Forwarder Upgrade

richgalloway — Thu, 19 Mar 2020 22:12:40 GMT

Scripts are available on this forum (use Google to search site:answers.splunk.com). For 3,000 forwarders, it'll be much easier to use a tool like Puppet or Ansible.

Re: Splunk Universal Forwarder Upgrade

ram254481493 — Fri, 20 Mar 2020 14:33:00 GMT

i tried to google it but didnt get any scripts could you please send me the link for those scripts ?

Re: Splunk Universal Forwarder Upgrade

richgalloway — Tue, 24 Mar 2020 12:55:01 GMT

This is the first result from my Google search: https://answers.splunk.com/answers/34896/simple-installation-script-for-universal-forwarder.html

Re: Splunk Universal Forwarder Upgrade

ram254481493 — Wed, 25 Mar 2020 13:52:09 GMT

thank you so much