topic Re: Why is there issue upgrading splunk universal forwarder? in Installation

Why is there issue upgrading splunk universal forwarder?

Poojitha — Tue, 24 Jan 2023 16:18:03 GMT

Hi All,

Please help me. I am trying to upgrade splunk UF forwarder to recent version i.e 9.0.3. I have stopped splunk service and have used below commands :

Downloaded tar file as root user :
wget -O splunkforwarder-9.0.3-dd0128b1f8cd-Linux-x86_64.tgz "https://download.splunk.com/products/universalforwarder/releases/9.0.3/linux/splunkforwarder-9.0.3-dd0128b1f8cd-Linux-x86_64.tgz"

Unzipped as splunk user :
tar xvfz splunkforwarder-9.0.3-dd0128b1f8cd-Linux-x86_64.tgz -C /opt

Running this as splunk user , tried as root user as well :
./splunk start -accept-license

But splunk start service is stopping here :

Error calling execve(): No such file or directory
Error launching command: Invalid argument

I have attached screenshot of what is happening, please help me with resolution.

I really appreciate your help.

Regards,
PNV

Re: Issue upgrading splunk universal forwarder

gcusello — Tue, 24 Jan 2023 08:37:50 GMT

Hi @Poojitha,

I suppose that you're running the installation command from the folder /opt/splunkforwarder/bin.

then the command is a little different than the one you used:

./splunk start --accept-license

then you can use a simpler command to untar but it shouldn't be a problem:

tar xvzf splunkforwarder_package_name.tgz

You can find more infos at https://docs.splunk.com/Documentation/Forwarder/9.0.3/Forwarder/Upgradetheuniversalforwarder#Upgrade_the_.2Anix_universal_forwarder

Ciao.

Giuseppe

Re: Issue upgrading splunk universal forwarder

Poojitha — Tue, 24 Jan 2023 09:29:00 GMT

@gcusello - Thanks for your response.

Yes , I am running splunk start from bin directory and the command as

./splunk start --accept-license

Previous one in my comment was the typo.

I tried reinstall with tar file command you gave. Its still same. Any other workaround ?

Regards,
PNV

Re: Issue upgrading splunk universal forwarder

gcusello — Tue, 24 Jan 2023 09:30:57 GMT

Hi @Poojitha,

I usually use rpm, please try this.

Ciao.

Giuseppe

Re: Why is there issue upgrading splunk universal forwarder?

blaha1 — Mon, 16 Oct 2023 12:00:42 GMT

Where you ever able to solve this issue?