Installation

Upgrading Universal Forwarder 8.x.x to 9.x.x does not work?

blaha1
Explorer

I have been using the Universal  forwarder splunkforwarder-7.2.6-c0bf0f679ce9-Linux-x86_64 for quite a while without issues. I now wanted to upgrade to the latest one, 9.0.2 so I downloaded it and ran it just like I did with the old version. However, when starting it, 

${SPLUNK_HOME}/bin/splunk start --accept-license --answer-yes --no-prompt
 
It seems to crash with
 
Error calling execve(): No such file or directory
Error launching command: Invalid argument
 
I then tried the latest 8.x.x version, 8.2.9 and that worked perfectly fine.
 
What has changed between version 8 and 9? Any new requirements I am not aware of?
Labels (3)
Tags (3)

spenna
Explorer

I have this same problem with containers. Works in 8.x, but get the same failure in 9.x. Investigating.

0 Karma

spenna
Explorer

Adding the following to my compose file fixes the problem with docker containers in 9.x:

  splunk:
     tty: true

 

edgars
Explorer

Thank you! This fixed the issue afret I upgraded from 8.x to 9.x.

0 Karma

blaha1
Explorer

And if you are not using compose files, is there perhaps something that can be configured?

0 Karma

spenna
Explorer

I don’t know if there is a config option for splunk itself. With docker cli, you should be able to add the -t flag and it would be the same as the compose version. 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

I can't find it documented, but going from 7 to 9 may be too much of a jump.  Now that you're on 8, installing 9 should work.

---
If this reply helps you, Karma would be appreciated.
0 Karma

blaha1
Explorer

 Its not really an upgrade, I'm using docker containers so its basically a fresh install everytime so to speak.

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Devesh Logendran, Splunk, and the Singapore Cyber Conquest

At this year’s Splunk University, I had the privilege of chatting with Devesh Logendran, one of the winners in ...

There's No Place Like Chrome and the Splunk Platform

WATCH NOW!Malware. Risky Extensions. Data Exfiltration. End-users are increasingly reliant on browsers to ...

Customer Experience | Join the Customer Advisory Board!

Are you ready to take your Splunk journey to the next level? 🚀 We invite you to join our elite squad ...