Download and configure your Remote Upgrader app
The Remote Upgrader app contains:
- The Remote Upgrader for Linux Universal Forwarders.
- An app to deliver the Remote Upgrader and universal forwarder packages to the Remote Upgrader location automatically. This app gets the Remote Upgrader to the host if you choose to deploy using the deployment server.
Download the Remote Upgrader for Linux Universal Forwarders Remote Upgrader app
- Download and untar the Remote Upgrader for Linux Universal Forwarders app on splunkbase.com.
- Open the Remote Upgrader app and copy the package from the app's default folder to your local folder in the app. (./default/splunk-upgrader-(latest version).tgz.)
Deployment considerations for the Remote Upgrader app
You can use your deployment server or a third-party tool to distribute this package across multiple universal forwarders. You cannot install it using the deployment server, instead you must install it as a root or sudo user with sufficient permissions on each universal forwarder server. For more information about the deployment server, see https://docs.splunk.com/Documentation/Splunk/9.1.0/Updating/Updateconfigurations.
Modify your Local_config file
You can create a local_config file before installation or edit the local_config file that is automatically created after installation.
The local_config file contains some of the configurations specific to your universal forwarder instance. For example, during installation, the Remote Upgrader for Linux Universal Forwarders can auto discover important Splunk configurations, such as where the universal forwarder is installed and the universal forwarder package type. When you run:
SPLUNK_HOME=/opt/splunkforwarder
The Remote Upgrader for Linux Universal Forwarders picks up the correct package.
Once you have untarred the package on a universal forwarder server and modified your local_config file as necessary, the next step is to run the installation script to install the Remote Upgrader for Linux Universal Forwarders.
Prerequisites | Install the Remote Upgrader for Linux Universal Forwarders |
This documentation applies to the following versions of Splunk® Universal Forwarder: 1.0.0, 8.2.11, 8.2.12, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9, 9.0.10, 9.1.0, 9.1.1, 9.1.2, 9.1.3, 9.1.4, 9.1.5, 9.1.6, 9.1.7, 9.2.0, 9.2.1, 9.2.2, 9.2.3, 9.2.4, 9.3.0, 9.3.1, 9.3.2, 9.4.0
Feedback submitted, thanks!