Getting Data In

Update slpunkclouduf.spl app on Windows Universal Forwarder-  What is the syntax we should use to force the update?

cpkg
Engager

Hi,

Got a message from Splunk that our universal forwarder certificate package will be expiring soon and trying to update the package following their instructions for installing the credentials package (which works on a new/clean install) it returns that we need to use the update argument:

 

 

App "100_XXXX_splunkcloud" already exists; use the "update" argument to install anyway

 

 

This is the syntax used (following Splunk documentation) that returns the message:

 

 

 .\splunk install app ../etc/apps/splunkclouduf.spl -auth xxx:xxxxxxx

 

 

 What is the syntax we should use to force the update? I have tried every which way that I can think of and nothing works. Thanks!

Labels (2)
0 Karma
1 Solution

isoutamo
SplunkTrust
SplunkTrust

You should add 

-update 1

to your

splunk install app

command 

View solution in original post

isoutamo
SplunkTrust
SplunkTrust

You should add 

-update 1

to your

splunk install app

command 

cpkg
Engager

@isoutamothat worked perfectly, thanks!

0 Karma
Get Updates on the Splunk Community!

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...

Splunk App Developers | .conf25 Recap & What’s Next

If you stopped by the Builder Bar at .conf25 this year, thank you! The retro tech beer garden vibes were ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...