Hello folks, We are doing splunkforwarder upgrade to 9.4.x (from 8.x) recently, we build the splunk sidecar image for our k8s application and i noticed the same procedures which works previous in fwd version 8.x don't work anymore in 9.4.x. during the docker image startup, it's clearly to see the process hanging there and wait for interaction. bash-4.4$ ps -ef
UID PID PPID C STIME TTY TIME CMD
splunkf+ 1 0 0 02:11 ? 00:00:00 /bin/bash /entrypoint.sh
splunkf+ 59 1 99 02:11 ? 00:01:25 /opt/splunkforwarder/bin/splunk edit user admin -password XXXXXXXX -role admin -auth admin:xxxxxx --answer-yes --accept-license --no-prompt
splunkf+ 61 0 0 02:12 pts/0 00:00:00 /bin/bash
splunkf+ 68 61 0 02:12 pts/0 00:00:00 ps -ef
bash-4.4$ rpm -qa | grep splunkforwarder
splunkforwarder-9.4.3-237ebbd22314.x86_64 there is a workaround to add a "tty: true" to k8s deployment template but this will cause a lot of efforts in our environment. Any idea if any newer version has the fix? or any splunk command parameter can be used to bypass the tty requirement? Thanks.
... View more