Getting Data In

What is the exact Raspberry Pi (Debian) CLI command to download the Universal Forwarder

unclesvenno
Engager

Sorry... total numbnut here... not much experience with *nix commands I'm sorry.

I want to download the Universal Forwarder directly onto the pi via PuTTY SSH session.

Do I use wgetor apt-get... have been looking for an exact command, but no luck. I'm pretty confused because once navigating from the primary page for the Universal Forwarder in Splunkbase (https://splunkbase.splunk.com/app/1611/ ), I log in and it takes me to the download page where I "agree" to the T&C:

https://splunkbase.splunk.com/app/1611/release/1.0/agree/

But the download just starts and, for the life of me, I can't find an appropriate URL to add to the wget command. (i.e. if I put the above page, I get "index.html".... pretty obviously not what I'm after...)

Please help!

0 Karma

jkat54
SplunkTrust
SplunkTrust

64bit, linux kernel 2.6+
wget -O splunkforwarder-6.4.0-f2c836328108-Linux-x86_64.tgz 'https://www.splunk.com/bin/splunk/DownloadActivityServlet?architecture=x86_64&platform=linux&version=6.4.0&product=universalforwarder&filename=splunkforwarder-6.4.0-f2c836328108-Linux-x86_64.tgz&wget=true'

32bit, linux kernel 2.6+
wget -O splunkforwarder-6.4.0-f2c836328108-Linux-i686.tgz 'https://www.splunk.com/bin/splunk/DownloadActivityServlet?architecture=x86&platform=linux&version=6.4.0&product=universalforwarder&filename=splunkforwarder-6.4.0-f2c836328108-Linux-i686.tgz&wget=true'

Others... open download on your personal computer... select the version you want to download... click on Get this URL next to "got wget"
alt text

unclesvenno
Engager

Brilliant, thanks very much. As far as I understand that's not the one specifically for running on the Raspberry Pi, or am I wrong?

Interestingly, in my research I could see there was supposed to be a "Got wget?" section on the page. I don't know why but i never rendered for me? Some other blogs/posts talked about that section being removed in a recent web-page upgrade but to get the screen shot I expect it must have rendered for you?

In the end, I had downloaded it to my Windows machine and then used WinSCP to copy the file over. I'm not all that happy with this though as a large part of me doing this is to learn more around the use of the Linux commands, etc.

0 Karma

jkat54
SplunkTrust
SplunkTrust

Ah I see the delema now. In this case I'd install fidler on my windows machine, log in to download the app, set fidler to recording mode, then click the download button, and check the GET requests in fidler.

0 Karma

jkat54
SplunkTrust
SplunkTrust

I wouldn't get hung up on using wget just to learn linux. I have to WinSCP or otherwise SCP things to linux all the time. Knowing both methods is key to being a good linux engineer. There's also a curl command that supports the "follow" switch which makes it follow redirects, etc. In this specific use case though, it's not going to work. The SCP method is a fine method and very much used by Linux admins everywhere. To get a true Linux command line browser which would work in this case, you'd need something like phantomJS which requires a lot of dependencies and scripting know how. I don't think its a good fit for RaspberryPi due to its size on disk.

0 Karma

jkat54
SplunkTrust
SplunkTrust

Ok so fidler didnt work, but what did work was downloading the file in Chrome, clicking "show all downloads" while it was downloading, and then copying the url from the downloads view in Chrome. This is what i got:

https://d38o4gzaohghws.cloudfront.net/media/private/7bbd71fe-798e-11e3-8089-005056ad2ccb.tgz?respons...

throw a wget in front of it...

wget -k 'https://d38o4gzaohghws.cloudfront.net/media/private/7bbd71fe-798e-11e3-8089-005056ad2ccb.tgz?response-content-disposition=attachment%3Bfilename%3D%22forwarder-for-linux-arm-raspberry-pi_10.tgz%22&Expires=1463309938&Signature=hfCRBjXFCLG4NQt4aAWVsGcYZSzIeJGA4NgyCtHabSp~Ukf7NdJhaQfx5boGf2ibgGSkmg3ZyvIxeSVxYLFAavYUtX71qiX7Eb0XGZtixhpFS3HHpmcrsPWE1r3TCVXbMEE0WvaOFVrRVC2RaB7djLOOoS~Ogw5DcWwCyVwUSXl6n--DJiGVv0GcN77JwFmGVki~WrMOrT5cvTDWyH-khz9l6oRs~5D1rGpf4Gm7N6Ntby82ZgH2PnmjzKkZ5cNwqD9pmb0vfWG1zGZM-uU8Mu9b3kGOetIJQpXi0SAS2yvxmsLLw93O9e8zC6gLat-BcD-T8psJY-mdTxP~Zs3-~g__&Key-Pair-Id=APKAISM7Q7KZPNKOIT7A'
0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...