About the Splunk Remote Upgrader for Linux Universal Forwarders

Use the Remote Upgrader for Linux Universal Forwarders to remotely upgrade your universal forwarder for Linux. The Remote Upgrader is a daemon that runs alongside the universal forwarder. It monitors a directory for a new version of the universal forwarder, once it finds one it performs the upgrade.

You install the Remote Upgrader for Linux Universal Forwarders on the same Linux instance as your universal forwarder. The Remote Upgrader for Linux Universal Forwarders then monitors for new universal forwarder packages in a predefined folder.

If a new universal forwarder package is found, the Remote Upgrader for Linux Universal Forwarders upgrades the universal forwarder with that package and then ingests the upgrade detail logs from the universal forwarder to the indexers. The new universal forwarder version is delivered to the host in the form of an app which can be delivered with the deployment server or independently.

The Remote Upgrader must be installed by a root user and maintains some elevated privileges.