How would you update customized app in clustered environment?

[splunkreal]

Hello,

would you copy the app's full folder in another location as backup, extract new app from tgz in master-apps or shcluster/apps then copy your local folder from backup to new one?

Thanks.

[gcusello]

Hi @splunkreal,

Updates must always be done by Master Node (on indexers' Cluster)  and on Deployer (on Search' Heads Cluster).

the update process is usually descripted in documentation, but anyway is simple:

• copy app on Master Node or Deployer,
• untar it in the correct folder,
• check files ownership (splunk:splunk),
• push it using the commands (GUI from Master Node and command from Deployer.

beware when you update an App from Deployer to preserve lookups because you risk to override the existing ones!

Ciao.

Giuseppe

[splunkreal]

Hi @gcusello 

so you don't mind if old files/deprecated, in default for instance, remain for new app?

Thanks.

[gcusello]

Hi @splunkreal,

when you update an app with a new version all the conf files in default will be overrided, only the ones in local will be saved.

Ciao.

Giuseppe

[splunkreal]

Thanks @gcusello however what about no longer in use confs or files no longer in use? Which command do you use to untar?

[gcusello]

Hi @splunkreal,

if I correctly understood, you're speking of update apps: new app versions contains only correct conf files and deprecated ones aren't still in the app.

Ciao.

Giuseppe

[splunkreal]

For example we downloaded app from splunkbase.

We have done some local confs.

We want to get the latest one from splunkbase

if we untar new app into old app directory then we may see old remaining files which were used by old app but not in the new app?

Thanks for your time 🙂