Deployment Architecture

Remote Upgrader for linux uf

ShawnXie
Loves-to-Learn

I have already deliver the splunk remote upgrader tgz ,with depoyment server.

Can i deliver a script too to automatically start the upgrader?

Splunk Remote Upgrader for Linux Universal Forwarders 

 

Labels (1)
0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @ShawnXie 

You mentioned the first 3 steps but have you also carried out the remainder of the steps at https://help.splunk.com/en/splunk-enterprise/forward-and-process-data/splunk-remote-upgrader-for-lin... such as starting the daemon 

sudo systemctl start splunk-upgrader
 
and also deploying splunk_app_uf_remote_upgrade_linux from your DS?
Please confirm you've followed all the steps and let us know if you have any issues/errors.

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

 

0 Karma

ShawnXie
Loves-to-Learn

thanks for your reply 

Lest my previous statement was unclear and caused any misunderstanding
I run the script by inputs.conf  like this:

 ShawnXie_0-1758160501171.png

ShawnXie_1-1758160530902.png

ShawnXie_2-1758160945276.png

 

i run upgrader_install.sh manually , everything is ok the service can start

i run upgrader_install.sh by inputs.conf interval it's failed

----------------------------------------------------------------------------------------------------

I'm not sure if I need add   --sudo systemctl start splunk-upgrader--  in my script  additionally
because when i run --
sudo ./bin/install.sh --accept-license --create-user--  ,and I run upgrader_install.sh manully   the splunk-upgrader.service finally start itself.

and when install failed, I can't start service actully

ShawnXie_3-1758161165790.png

 

Error log like this

ShawnXie_4-1758161196887.png

 

0 Karma

ShawnXie
Loves-to-Learn

I try to deliver a script use deployment server with 3 steps

1,cp the tgz to /opt

2,untar the upgrader tgz

3,run command as document say

sudo ./bin/install.sh --accept-license --create-user

The result shows step1,2 finished but have some problem with step 3 

Splunk Remote Upgrader for Linux Universal Forwarders 

0 Karma

PrewinThomas
Motivator

@ShawnXie 
Are you installing with root user? Also can you share your error details here.

Regards,
Prewin
If this answer helped you, please consider marking it as the solution or giving a Karma. Thanks!

 

0 Karma

ShawnXie
Loves-to-Learn

thanks for your reply 
and Lest my previous statement was unclear and caused any misunderstanding

i run upgrader_install.sh manually , everything is ok the service can start.

i run upgrader_install.sh by inputs.conf interval it's failed

ShawnXie_0-1758161419524.png

ShawnXie_1-1758161447938.png

ShawnXie_2-1758161617334.png

I'm not sure which user the Splunk run script uses and what permissions it has.
even though the log says :
current user is root
EUID is 0

my test environment splunkd run as root

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...