How to upgrade multiple Linux forwarders at the same time?

[dinesh2012]

I have more than 50 Linux forwarders, is there a way I can upgrade them at one go or do I need to login stop and untar the new version and start ?

[koshyk]

If you are asking about Installing Forwarders as such , you need to use external Config management software (like Puppet/Chef) or your admin might have a satellite server who can do it for you. You could write your own scripts which you can give to your admin (Some sample I have written: https://github.com/getkub/SplunkScriplets/tree/master/SplunkForwarders/SPF_Install)

If you are asking about installing Knowledge objects (like apps, configs) , Definitely you need to start using "Deployment Server". Very easy to setup and you can control all your forwarders from a centralised location. Documentation: http://docs.splunk.com/Documentation/Splunk/latest/Updating/Planadeployment

[MuS · Accepted solution]

Hi dinesh2012,

there is no way to do this within Splunk.
Use any Software distribution or a remote script like the one you can find here http://wiki.splunk.com/Deploying_Splunk_Light_Forwarders or here this one here http://answers.splunk.com/answers/100989/forwarder-installation-script.html

cheers, MuS