Splunk® Universal Forwarder

Splunk Remote Upgrader for Linux Universal Forwarders

Release notes

Release notes

1.0.0

Version 1.0.0 was released on January 16, 2025.

About this release

The Remote Upgrader for Linux Universal Forwarders to remotely upgrade your universal forwarder for Linux. It monitors for new universal forwarder packages in a predefined folder and upgrades the universal forwarder with new packages and then ingests the upgrade detail logs from the universal forwarder to the indexers.

Known issues

This topic lists known issues that are specific to the universal forwarder.


Jira Issue
SPL-242848 UF changes after the updater installation may need to manually update the config files:
Changes after updater installation Problem Root cause Resolution
Change SPLUNK_HOME Get the previous SPLUNK_HOME, and abort upgrade due to invalid SPLUNK_HOME SPLUNK_HOME is discovered only once during installation Manually update SPLUNK_HOME in local_config
Install UF with another package Abort upgrade due to no package found from the monitored dir, or upgrade with incorrect package INSTALLED_UF_PKG_TYPE is discovered only once during installation Manually update INSTALLED_UF_PKG_TYPE in local_config


SPL-241389 Lack of rmp/dpkg permission of the updater user may upgrade UF with wrong packages.
Last modified on 06 March, 2025
Troubleshooting  

This documentation applies to the following versions of Splunk® Universal Forwarder: 1.0.0, 8.2.11, 8.2.12, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9, 9.0.10, 9.1.0, 9.1.1, 9.1.2, 9.1.3, 9.1.4, 9.1.5, 9.1.6, 9.1.7, 9.1.8, 9.2.0, 9.2.1, 9.2.2, 9.2.3, 9.2.4, 9.2.5, 9.3.0, 9.3.1, 9.3.2, 9.3.3, 9.4.0, 9.4.1


Please expect delayed responses to documentation feedback while the team migrates content to a new system. We value your input and thank you for your patience as we work to provide you with an improved content experience!

Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters