Solved: Splunk Universal Forwarder Upgrade

ram254481493 · ‎03-19-2020

Hi ,

I am looking for some information on Splunk Universal forwarder upgrade. We have 3000 + forwarders that needs a mass upgrade. What are the things do i need to consider for upgrading like backups etc ? i am looking for some scripts for linux system to remote upgrade the forwarders. Please let me know if any one have some scripts available. I am looking for the same info for windows as well.

richgalloway · ‎03-19-2020

Scripts are available on this forum (use Google to search site:answers.splunk.com). For 3,000 forwarders, it'll be much easier to use a tool like Puppet or Ansible.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway · ‎03-19-2020

Scripts are available on this forum (use Google to search site:answers.splunk.com). For 3,000 forwarders, it'll be much easier to use a tool like Puppet or Ansible.

---
If this reply helps you, Karma would be appreciated.

ram254481493 · ‎03-20-2020

i tried to google it but didnt get any scripts could you please send me the link for those scripts ?

richgalloway · ‎03-24-2020

This is the first result from my Google search: https://answers.splunk.com/answers/34896/simple-installation-script-for-universal-forwarder.html

---
If this reply helps you, Karma would be appreciated.

ram254481493 · ‎03-25-2020

thank you so much

Splunk Universal Forwarder Upgrade

Archived Metrics Now Available for APAC and EMEA realms

Detecting Remote Code Executions With the Splunk Threat Research Team

Enter the Dashboard Challenge and Watch the .conf24 Global Broadcast!