I am looking for some information on Splunk Universal forwarder upgrade. We have 3000 + forwarders that needs a mass upgrade. What are the things do i need to consider for upgrading like backups etc ? i am looking for some scripts for linux system to remote upgrade the forwarders. Please let me know if any one have some scripts available. I am looking for the same info for windows as well.
Scripts are available on this forum (use Google to search site:answers.splunk.com). For 3,000 forwarders, it'll be much easier to use a tool like Puppet or Ansible.
This is the first result from my Google search: https://answers.splunk.com/answers/34896/simple-installation-script-for-universal-forwarder.html