Why is there issue upgrading splunk universal forwarder?

[Poojitha]

Hi All,

Please help me. I am trying to upgrade splunk UF forwarder to recent version i.e 9.0.3. I have stopped splunk service and have used below commands :

Downloaded tar file as root user :
wget -O splunkforwarder-9.0.3-dd0128b1f8cd-Linux-x86_64.tgz "https://download.splunk.com/products/universalforwarder/releases/9.0.3/linux/splunkforwarder-9.0.3-d..."

Unzipped as splunk user :
tar xvfz splunkforwarder-9.0.3-dd0128b1f8cd-Linux-x86_64.tgz -C /opt

Running this as splunk user , tried as root user as well :
./splunk start -accept-license

But splunk start service is stopping here :

Error calling execve(): No such file or directory
Error launching  command: Invalid argument

I have attached screenshot of what is happening, please help me with resolution.

I really appreciate your help.

Regards,
PNV

[Poojitha]

@gcusello - Thanks for your response.

Yes , I am running splunk start from bin directory and the command as 

./splunk start --accept-license

Previous one in my comment was the typo. 

I tried reinstall with tar file command you gave. Its still same. Any other workaround ?

Regards,
PNV

[gcusello]

Hi @Poojitha,

I usually use rpm, please try this.

Ciao.

Giuseppe

[gcusello]

Hi @Poojitha,

I suppose that you're running the installation command from the folder /opt/splunkforwarder/bin.

then the command is a little different than the one you used:

./splunk start --accept-license

then you can use a simpler command to untar but it shouldn't be a problem:

tar xvzf splunkforwarder_package_name.tgz

You can find more infos at https://docs.splunk.com/Documentation/Forwarder/9.0.3/Forwarder/Upgradetheuniversalforwarder#Upgrade...

Ciao.

Giuseppe