All Apps and Add-ons

Linux Splunk upgrade script

Smokex365
Engager

The goal: A single script that can be run to:

List item

  • download splunk using the wget links (or from a directory if that would be an issue)
  • run the upgrade (the .deb file in my case)
  • answer the terms
  • and start splunk agian.

List item

I'm still very new to bash scripting so I have no clue even where to start. It would be nice to be able to just run this script and have everything done automatically. I could also see it being set as a scheduled task as long as some kind of check could be added to ensure it didn't spam the splunk servers and and download anything unless it's updated.

0 Karma

yannK
Splunk Employee
Splunk Employee

not tested

#!/bin/bash
splunk_download="http://blah.vlah.blah.com/splunk_installer.deb"
splunk_installer="splunk_installer.deb"

wget $splunk_download
/opt/splunk/bin/splunk stop
dpkg -i $splunk_installer
/opt/splunk/bin/splunk start --accept-license
rm -rf $splunk_installer 

Lsv
New Member

Don't forget you'll have to restart splunk after an update due to the license agreement. So that script could probably make use of

sudo service splunk restart

...and follow the instructions to move forward, unless there's something you can append to the dkpg line and do more?

0 Karma

yannK
Splunk Employee
Splunk Employee

not that I am aware of, you still can create a local repository for your install bits

0 Karma

Smokex365
Engager

Any way to make this work with the wget through releases without having to update the script for each release?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...

SplunkTrust Application Period is Officially OPEN!

It's that time, folks! The application/nomination period for the 2026-2027 SplunkTrust is officially open. If ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...