All Apps and Add-ons

Linux Splunk upgrade script

Smokex365
Engager

The goal: A single script that can be run to:

List item

  • download splunk using the wget links (or from a directory if that would be an issue)
  • run the upgrade (the .deb file in my case)
  • answer the terms
  • and start splunk agian.

List item

I'm still very new to bash scripting so I have no clue even where to start. It would be nice to be able to just run this script and have everything done automatically. I could also see it being set as a scheduled task as long as some kind of check could be added to ensure it didn't spam the splunk servers and and download anything unless it's updated.

0 Karma

yannK
Splunk Employee
Splunk Employee

not tested

#!/bin/bash
splunk_download="http://blah.vlah.blah.com/splunk_installer.deb"
splunk_installer="splunk_installer.deb"

wget $splunk_download
/opt/splunk/bin/splunk stop
dpkg -i $splunk_installer
/opt/splunk/bin/splunk start --accept-license
rm -rf $splunk_installer 

Lsv
New Member

Don't forget you'll have to restart splunk after an update due to the license agreement. So that script could probably make use of

sudo service splunk restart

...and follow the instructions to move forward, unless there's something you can append to the dkpg line and do more?

0 Karma

yannK
Splunk Employee
Splunk Employee

not that I am aware of, you still can create a local repository for your install bits

0 Karma

Smokex365
Engager

Any way to make this work with the wget through releases without having to update the script for each release?

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...