Splunk® Universal Forwarder

Splunk Remote Upgrader for Linux Universal Forwarders

Download and configure your Remote Upgrader app

The Remote Upgrader app contains:

  • The Remote Upgrader for Linux Universal Forwarders.
  • An app to deliver the Remote Upgrader and universal forwarder packages to the Remote Upgrader location automatically. This app gets the Remote Upgrader to the host if you choose to deploy using the deployment server.

Download the Remote Upgrader for Linux Universal Forwarders Remote Upgrader app

  1. Download and untar the Remote Upgrader for Linux Universal Forwarders app on splunkbase.com.
  2. Open the Remote Upgrader app and copy the package from the app's default folder to your local folder in the app. (./default/splunk-upgrader-(latest version).tgz.)

Deployment considerations for the Remote Upgrader app

You can use your deployment server or a third-party tool to distribute this package across multiple universal forwarders. You cannot install it using the deployment server, instead you must install it as a root or sudo user with sufficient permissions on each universal forwarder server. For more information about the deployment server, see https://docs.splunk.com/Documentation/Splunk/9.1.0/Updating/Updateconfigurations.

Modify your Local_config file

You can create a local_config file before installation or edit the local_config file that is automatically created after installation.

The local_config file contains some of the configurations specific to your universal forwarder instance. For example, during installation, the Remote Upgrader for Linux Universal Forwarders can auto discover important Splunk configurations, such as where the universal forwarder is installed and the universal forwarder package type. When you run:

SPLUNK_HOME=/opt/splunkforwarder

The Remote Upgrader for Linux Universal Forwarders picks up the correct package.

Once you have untarred the package on a universal forwarder server and modified your local_config file as necessary, the next step is to run the installation script to install the Remote Upgrader for Linux Universal Forwarders.

Last modified on 24 January, 2025
Prerequisites   Install the Remote Upgrader for Linux Universal Forwarders

This documentation applies to the following versions of Splunk® Universal Forwarder: 1.0.0, 8.2.11, 8.2.12, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9, 9.0.10, 9.1.0, 9.1.1, 9.1.2, 9.1.3, 9.1.4, 9.1.5, 9.1.6, 9.1.7, 9.2.0, 9.2.1, 9.2.2, 9.2.3, 9.2.4, 9.3.0, 9.3.1, 9.3.2, 9.4.0


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters