Getting Data In

Splunk Universal Forwarder Upgrade

ram254481493
Explorer

Hi ,

I am looking for some information on Splunk Universal forwarder upgrade. We have 3000 + forwarders that needs a mass upgrade. What are the things do i need to consider for upgrading like backups etc ? i am looking for some scripts for linux system to remote upgrade the forwarders. Please let me know if any one have some scripts available. I am looking for the same info for windows as well.

0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Scripts are available on this forum (use Google to search site:answers.splunk.com). For 3,000 forwarders, it'll be much easier to use a tool like Puppet or Ansible.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Scripts are available on this forum (use Google to search site:answers.splunk.com). For 3,000 forwarders, it'll be much easier to use a tool like Puppet or Ansible.

---
If this reply helps you, Karma would be appreciated.
0 Karma

ram254481493
Explorer

i tried to google it but didnt get any scripts could you please send me the link for those scripts ?

0 Karma

richgalloway
SplunkTrust
SplunkTrust

This is the first result from my Google search: https://answers.splunk.com/answers/34896/simple-installation-script-for-universal-forwarder.html

---
If this reply helps you, Karma would be appreciated.
0 Karma

ram254481493
Explorer

thank you so much

0 Karma
Get Updates on the Splunk Community!

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...