Splunk® Asset and Risk Intelligence

Install and Upgrade Splunk Asset and Risk Intelligence

Splunk Asset and Risk Intelligence is not compatible with Splunk Enterprise 9.1.2 due to known issues SPL-237796, SPL-248319 where search results in "results" have more rows than expected. Upgrade to Splunk Enterprise 9.1.3 to use Splunk Asset and Risk Intelligence.

Upgrade Splunk Asset and Risk Intelligence

Upgrade the Splunk Asset and Risk Intelligence app by completing these high-level steps:

  1. Prerequisites
  2. Download and upgrade the app
  3. Reconfigure app settings

Prerequisites

Before you can start an upgrade, you must deactivate the processing searches. To deactivate the processing searches, complete the following steps:

  1. In Splunk Asset and Risk Intelligence, select Admin and then Configuration settings.
  2. Select Turn all off for Process searches.

Download and upgrade the app

You can upgrade Splunk Asset and Risk Intelligence on either a Splunk Enterprise or Splunk Cloud Platform deployment. Complete the following steps based on your deployment type:

Splunk Cloud Platform

  1. From the Splunk Web menu, select Apps and then Manage apps.
  2. Locate Splunk Asset and Risk Intelligence from the list of apps.
  3. Select View details on Splunkbase and then upgrade the app through Splunkbase.
  4. Restart the search head.

Splunk Enterprise

  1. Upgrade the app using one of the following methods:
    1. Upload the new app version directly on the search head from the Splunk Enterprise home page and then overwrite the existing installation.
    2. Use Splunkbase to upgrade the app.
  2. Restart the search head.

If you see any errors or warnings following the upgrade and restart of the search head, you might need to clear the cache on your browser.

Reconfigure app settings

After you upgrade the app, you must complete a few steps in Splunk Asset and Risk Intelligence to restore the appropriate functionality:

  1. Run upgrade checks.
    1. Select Admin and then Install and upgrade helper.
    2. In the Upgrade from a previous version section, select Check upgrade for each option.
    3. Run the upgrade checks to populate all of your data.
      After you complete the checks, the Check upgrade dialogue box displays "Success".
  2. Reactivate the Splunk Asset and Risk Intelligence processing searches.
    1. Select Admin and then Configuration settings.
    2. Select Turn all on for Process searches.
Last modified on 05 August, 2024
Back up the Splunk Asset and Risk Intelligence app and KV stores  

This documentation applies to the following versions of Splunk® Asset and Risk Intelligence: 1.0.0, 1.0.1

Acrobat logo Download manual
Acrobat logo Download this page

Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters