Scripting to Download UniversalForwarder- What URL and header information syntax for login do I need?

[klint]

Hi,

I work for a company that has Splunk used on Servers. it is governed by a main team, however the installation of Universal Forwarder is up to the individual teams, as a result, the version needs update from time to time.

I am in the process of automating all software version downloads the platform I maintain uses and was wondering if there is a known way to connect with the splunk site and download the latest version of UniversalForwarded via script. I use powershell but could try translate other scripts if there is a method. 

any info on URL and any header information syntax for login I need is appreciated

Thank you

[gcusello]

Hi @klint ,

if you're speaking of windows servers, you can use GPO to deploy UF updates from a copy that you downloaded from the Splunk Site.

If you're speaking of Linux servers, you have to use a script that you can find in the Community always downloading from a copy from the Splunk Site..

At the moment, there isn't a procedure or a tool released by Splunk to update a Forwarder directly from the Splunk site.

There are two apps developed by Community members to update UF using the Deployment Server, in the meantime Splunk is releasing the feature of updating the UF directly from Deployment Server and it will be released if few time (I hope!), for more infos you can see at Splunk Ideas.

Ciao.

Giuseppe

[klint]

Thanks for getting back to me Giuseppe

What you have said would work for installing but that still requires me to download the copy every month. I am hoping for an automated solution to download it every month so i can leave it to an automated process .

Trying to automate as much as possible and remove manual work

[gcusello]

Hi @klint ,

No there isn't an automation to download the latest version of UF, also beacuse the UF update is usually an activity to manualy do, to have a greater control.

You could propose this to Splunk Ideas.

Ciao.

Giuseppe

[isoutamo]

Hi

I think that this https://github.com/ryanadler/downloadSplunk can help you with your journey to automatic load needed splunk version.

r. Ismo

[RMcCurdyDOTcom]

got nasty gram for posting links

search online for freeload101 github in scripts Splunk_UniversalForwarder_Installer.bash