forwarder version upgrade by remotely

[shashidharh]

Hi,I do have 100+ servers where splunk forwarders' version is older one and needs to upgrade . I don't have access to these servers. Without effecting configuration,how do I upgrade those by remotely ?

[gcusello]

Hi @shashidharh,

the easiest solution is to use  a software distribution tool as Ivanti or Ansible or others.

If you haven't:

• if your servers are Windows, you can use a GPO to run the installer;
• if your servers are Linux, you can use a script available in Community (search it using Google).

Otherwise, in apps.splunk.com, two apps to upgrade forwarders are available:

• for Windows servers https://splunkbase.splunk.com/app/5003/,
• for Linux servers https://splunkbase.splunk.com/app/5004/.

I didn't still used them.

Ciao.

Giuseppe