Getting Data In

forwarder version upgrade by remotely


Hi,I do have 100+ servers where splunk forwarders' version is older one and needs to upgrade . I don't have access to these servers. Without effecting configuration,how do I upgrade those by remotely ?

Labels (1)


Hi @shashidharh,

the easiest solution is to use  a software distribution tool as Ivanti or Ansible or others.

If you haven't:

  • if your servers are Windows, you can use a GPO to run the installer;
  • if your servers are Linux, you can use a script available in Community (search it using Google).

Otherwise, in, two apps to upgrade forwarders are available:

I didn't still used them.



Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!