Installation

Why is there issue upgrading splunk universal forwarder?

Poojitha
Path Finder

Hi All,

Please help me. I am trying to upgrade splunk UF forwarder to recent version i.e 9.0.3. I have stopped splunk service and have used below commands :

Downloaded tar file as root user :
wget -O splunkforwarder-9.0.3-dd0128b1f8cd-Linux-x86_64.tgz "https://download.splunk.com/products/universalforwarder/releases/9.0.3/linux/splunkforwarder-9.0.3-d..."

Unzipped as splunk user :
tar xvfz splunkforwarder-9.0.3-dd0128b1f8cd-Linux-x86_64.tgz -C /opt

Running this as splunk user , tried as root user as well :
./splunk start -accept-license

But splunk start service is stopping here :

Error calling execve(): No such file or directory
Error launching  command: Invalid argument

I have attached screenshot of what is happening, please help me with resolution.

I really appreciate your help.

Regards,
PNV




Labels (2)
0 Karma

Poojitha
Path Finder

@gcusello - Thanks for your response.

Yes , I am running splunk start from bin directory and the command as 

./splunk start --accept-license

Previous one in my comment was the typo. 

I tried reinstall with tar file command you gave. Its still same. Any other workaround ?

Regards,
PNV

 

0 Karma

gcusello
Esteemed Legend

Hi @Poojitha,

I usually use rpm, please try this.

Ciao.

Giuseppe

0 Karma

gcusello
Esteemed Legend

Hi @Poojitha,

I suppose that you're running the installation command from the folder /opt/splunkforwarder/bin.

then the command is a little different than the one you used:

./splunk start --accept-license

then you can use a simpler command to untar but it shouldn't be a problem:

tar xvzf splunkforwarder_package_name.tgz

You can find more infos at https://docs.splunk.com/Documentation/Forwarder/9.0.3/Forwarder/Upgradetheuniversalforwarder#Upgrade...

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

New Splunk Observability innovations: Deeper visibility and smarter alerting to ...

You asked, we delivered. Splunk Observability Cloud has several new innovations giving you deeper visibility ...

Synthetic Monitoring: Not your Grandma’s Polyester! Tech Talk: DevOps Edition

Register today and join TekStream on Tuesday, February 28 at 11am PT/2pm ET for a demonstration of Splunk ...

Instrumenting Java Websocket Messaging

Instrumenting Java Websocket MessagingThis article is a code-based discussion of passing OpenTelemetry trace ...