Need to Splunk UF from 8.2.9 to 9.4.3 in AIX 7.2

[vis1519]

Hi All,

I need to upgrade the Splunk Universal Forwarder (UF) on AIX 7.2 from version 8.2.9 to 9.4.3. However, after attempting the upgrade, the Splunk UF crashes immediately upon startup.

Could you please provide the proper upgrade steps and let me know if there are any known limitations or compatibility issues with this upgrade?

Thanks in advance for your help.

[livehybrid]

Hi @vis1519 

Please could you check the server logs in $SPLUNK_HOME/var/log/splunk/splunkd.log - Are there any specific log lines which report an error during startup?

Or are there other errors displayed when you try and start the Splunk service?

🌟 Did this answer help you? If so, please consider:

• Adding karma to show it was useful
• Marking it as the solution if it resolved your issue
• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

[PickleRick]

Your AIX version seems to be supported so generally it should ran.

The upgrade procedure is no rocket science - https://help.splunk.com/en/splunk-enterprise/forward-and-process-data/universal-forwarder-manual/9.3...

One caveat though - you must use GNU tar for extracting the installation archive, not AIX tar.