Upgrade the Splunk Data Stream Processor from 1.2.0 to 1.2.1-patch02
This topic describes how to upgrade the Splunk Data Stream Processor (DSP) from 1.2.0 to 1.2.1-patch02.
Before you upgrade
Before you upgrade DSP, review the known issues related to the upgrade process. Depending on what functions you have in your pipelines, you might need to do some additional steps to restore those pipelines after the upgrade is complete. In addition, there are some workarounds for these known issues.
Step 1: Disable the scheduled jobs
The scheduled jobs in each Amazon CloudWatch Metrics, Amazon S3, AWS Metadata, Google Cloud Monitoring, Microsoft 365, and Microsoft Azure Monitor source connector must be disabled before you upgrade DSP. If you do not deactivate all scheduled jobs in these connectors before upgrading your DSP deployment, the Kubernetes container image name used by these connectors is not updated. See the ImagePullBackoff status shown in Kubernetes after upgrading DSP troubleshooting topic for more information.
- Open the DSP UI and navigate to Data Management > Connections.
- Deactivate the schedule for each Amazon CloudWatch Metrics, Amazon S3, AWS Metadata, Google Cloud Monitoring, Microsoft 365, and Microsoft Azure Monitor source connector.
- Select the connection you want to edit.
- Toggle the Scheduled parameter off.
- Save your changes
Step 2: Upgrade the Splunk Data Stream Processor
- Download the new Data Stream Processor tarball on the master node of your cluster.
- Extract the tarball.
tar xf <dsp-version>.tar
- Navigate to the extracted file.
- (Optional) If your environment has a small root volume (6GB or less of free space) in
/tmp, your upgrade may fail when you run out of space. Choose a different directory to write temporary files to during the upgrade process.
- From the extracted file directory, run the upgrade script.
- Upgrading can take a while. Upon completion, the following message is shown.
Waiting for DSP to startup .................... DSP startup completed
- (Optional) While waiting for the upgrade to complete, you can use the following command to monitor the progress of your upgrade. Run this command after you see the
Waiting for DSP to startupmessage.
kubectl get pods -n dspWhen the following services have status
RUNNING, then the upgrade is complete:
You are now ready to use the latest version of DSP.
Step 3: Validate the upgrade
The Splunk Data Stream Processor upgrade is now complete. Any pipelines that were active before the upgrade is reactivated. When the upgrade is completed, DSP shows the following message:
DSP startup completed.
- In the browser you use to access the DSP UI, clear the browser cache.
- Log in to DSP to confirm that your upgrade was successful.
https://<DSP_HOST>:30000/ User: dsp-admin Password: <the dsp-admin password>
Perform the following steps after upgrading the Splunk Data Stream Processor.
- On each node, delete the directories containing the old version of the Splunk Data Stream Processor.
rm -r <dsp-version-upgraded-from>
- Re-enable the schedules for the Amazon CloudWatch Metrics, Amazon S3, AWS Metadata, Google Cloud Monitoring, Microsoft 365, and Microsoft Azure Monitor connectors that were disabled in Step 2.
After upgrading to the latest version of the Splunk Data Stream Processor, any command-line operations must be performed in the new upgraded directory on the master node.
Install the Splunk Data Stream Processor
Uninstall the Splunk Data Stream Processor
This documentation applies to the following versions of Splunk® Data Stream Processor: 1.2.1-patch02
Feedback submitted, thanks!