Getting Data In

Upgrade UF package credential

tbavarva
Path Finder

Hi all,
We are trying to upgrade UF package credential in our intermediate forwarders (including HFs).

PFB steps which I followed:
1. Login to SH
2. Go to apps --> Universal Forwarder
3. splunkclouduf.spl file downloaded and installed on HFs via GUI.

But when it came to UFs, I am not sure whether GUI was enabled or UF has GUI so I had to copy the 100_splunkcloud app folder (from HF) and pasted into apps folder in UF.

Then I restarted UF. And started getting error: can't read key file.

I am sure I am missing something while doing this task in UF.

Could someone please help?

Thanks in advance.

Regards,
Tejas

0 Karma
1 Solution

tbavarva
Path Finder

Thanks a lot Rich.

Your comment helped me to upgrade credential package of UF.

The steps you followed sound correct. Try again, but this time extract splunkclouduf.spl into the UF's apps directory instead of copying it from the HF. Use tar -zxf splunkclouduf.spl -C /opt/splunkforwarder/etc/apps to extract the app.

Regards,
Tejas

View solution in original post

0 Karma

tbavarva
Path Finder

Thanks a lot Rich.

Your comment helped me to upgrade credential package of UF.

The steps you followed sound correct. Try again, but this time extract splunkclouduf.spl into the UF's apps directory instead of copying it from the HF. Use tar -zxf splunkclouduf.spl -C /opt/splunkforwarder/etc/apps to extract the app.

Regards,
Tejas

0 Karma

richgalloway
SplunkTrust
SplunkTrust

The steps you followed sound correct. Try again, but this time extract splunkclouduf.spl into the UF's apps directory instead of copying it from the HF. Use tar -zxf splunkclouduf.spl -C /opt/splunkforwarder/etc/apps to extract the app.

---
If this reply helps you, Karma would be appreciated.
0 Karma

tbavarva
Path Finder
0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...