Getting Data In

upgrade forwarder to Splunk 6 without reboot

jonthanze
Explorer

Hi

i have several windows servers with the Splunk universal forwarder version 5.xx.
I wanted to upgrade my forwarders to 6.0 but each time i run the install file of 6 i request me rebooting my server.

Isn't there a way to upgrade my forwarders without rebooting the servers ?

0 Karma
1 Solution

lukejadamec
Super Champion

Are you stopping the splunkd service prior to the install? If you don't, then I'm pretty sure a reboot is required to finish cleaning things up in a Windows environment.

View solution in original post

rickjury
Explorer

This happened to us when we started upgrading forwarders in production even though it never happened on 100 non prod ones. This should be in the manual in huge letters somewhere...

0 Karma

lukejadamec
Super Champion

No problem

0 Karma

jonthanze
Explorer

thanks a lot, that helped !

0 Karma

lukejadamec
Super Champion

Are you stopping the splunkd service prior to the install? If you don't, then I'm pretty sure a reboot is required to finish cleaning things up in a Windows environment.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...

What's New in Splunk Enterprise Security 8.8 and Beyond

Threats move at machine speed. Keeping up should not depend on having the biggest budget, the largest team, or ...

A Four-Part Event Series: State of Observability - Where AI Meets Performance

As AI agents take on more complex tasks, teams need greater visibility into how they behave, what they cost, ...