Deployment Architecture

Is there a need to upgrade forwarder as well during Splunk version upgradation process?

sanjubaba
Path Finder

Is there a need to upgrade forwarder as well during Splunk version upgradation process?

0 Karma

renjith_nair
Legend

It's not mandatory but recommended especially in case of security vulnerabilities.

However, you should make sure that the forwarders are compatible with indexers

Reference : https://docs.splunk.com/Documentation/VersionCompatibility/current/Matrix/Compatibilitybetweenforwar...

Additional documentation for update scenarios and instructions : https://docs.splunk.com/Documentation/Forwarder/8.0.5/Forwarder/Upgradethenixuniversalforwarder

 

---
What goes around comes around. If it helps, hit it with Karma 🙂

sanjubaba
Path Finder

@renjith_nair thanks for the information.

How can I check which forwarder version is installed on my linux machine?

Can you help me with the command?

0 Karma

renjith_nair
Legend

you can use the splunk binary from the machine

./splunk --version

OR

use SPL to search for all machines

index=_internal source=*metrics.log group=tcpin_connections 
| rename connectionType as connectType
| eval connectType=case(fwdType=="uf","univ fwder", fwdType=="lwf", "lightwt fwder",fwdType=="full", "heavy fwder", connectType=="cooked" or connectType=="cookedSSL","Splunk fwder", connectType=="raw" or connectType=="rawSSL","legacy fwder")
|stats first(version) as version,first(connectType) as connectType by hostname

 

---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma
Get Updates on the Splunk Community!

Fueling your curiosity with new Splunk ILT and eLearning courses

At Splunk Education, we’re driven by curiosity—both ours and yours! That’s why we’re committed to delivering ...

Splunk AI Assistant for SPL 1.1.0 | Now Personalized to Your Environment for Greater ...

Splunk AI Assistant for SPL has transformed how users interact with Splunk, making it easier than ever to ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureOn Demand Now Step boldly into the AI revolution with enhanced security ...