Splunk® Enterprise

Upgrade Readiness

Acrobat logo Download manual as PDF


Splunk Enterprise version 8.2 is no longer supported as of September 30, 2023. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see How to upgrade Splunk Enterprise.
This documentation does not apply to the most recent version of Splunk® Enterprise. For documentation on the most recent version, go to the latest release.
Acrobat logo Download topic as PDF

Scan a Splunk platform instance with the Upgrade Readiness App

Use the Upgrade Readiness App to scan a Splunk platform instance.

Prerequisites

The Upgrade Readiness App no longer supports manual scans.

Steps

To scan your Splunk platform instance, follow these steps:

  1. The Upgrade Readiness App automatically scans all apps daily by default. The Python scan runs at 1 AM system time, and the jQuery scan runs at 4 AM system time. Scan results appear automatically after the scan completes.
  2. Review the scan results for each app in the Python and jQuery tabs.
  3. (Optional) Click Export Results to export your scan results. You can choose to export in JSON format.
  4. (Optional) Click Email Result to email your scan results. Make sure to configure email settings. For configuration instructions, see Configure email notifications for your Splunk platform instance.
  5. Dismiss any failed files in your private applications if you want to mark it as an exception.

You can also run scans using the REST API. For more information, see the REST API reference for the Upgrade Readiness App.

Schedule a scan

The Upgrade Readiness App scans all apps daily by default. The Python scan runs at 1 AM system time, and the jQuery scan runs at 4 AM system time. The scan schedule applies to both local search heads and remote indexers.

You can modify the app scan schedule, as follows:

  1. In Splunk Web, launch the Upgrade Readiness App.
  2. Select either the Python or jQuery tab to modify that scheduled scan.
  3. Click Manage Scan Schedule.
  4. Select Scan my apps on a custom schedule, then specify the scan interval.
  5. Click Save.

Disable the scan

You can disable the scan at any time, as follows:

  1. Click Manage Scan Schedule.
  2. Select Turn Scan Off.
  3. Click Save.
    Your request is saved to the KV store, but the schedule change can take up to 2 hours to be reflected on the indexing tier.

After you disable the scan, you must explicitly enable it to rerun the scan at the defined interval. Changing the schedule in the Manage Scan Schedule dialog does not reenable the scan. Any modification to the scan schedule is reflected on indexers for remote instances and search heads for local instances after 2 hours.

Disable app list updates

The Upgrade Readiness App pulls Splunkbase apps and metadata daily 7 minutes past every eighth hour. Disabling app list updates applies to standalone instances and not to Splunk Cloud Platform. Splunk Enterprise users can disable automatic app list updates, as follows:

  1. Click Settings > Data inputs > Scripts.
  2. Find the pura_get_all_apps.py script in the python_upgrade_readiness_app section.
  3. Click Disable.

Splunk Cloud Platform users cannot disable the script. To request that Support disable the script, submit a case using the Splunk Support Portal.

If you are running the Upgrade Readiness App in an air-gapped environment where automatic updates of the app list from Splunkbase are not possible, you can still run scans, but the app list is limited to the apps packaged with the app.

Last modified on 02 June, 2022
PREVIOUS
Manage permissions for the Upgrade Readiness App
  NEXT
Manage weekly emails from the Upgrade Readiness App

This documentation applies to the following versions of Splunk® Enterprise: 8.2.0, 8.2.1, 8.2.2, 8.2.3, 8.2.4, 8.2.5, 8.2.6, 8.2.7, 8.2.8, 8.2.9, 8.2.10, 8.2.11, 8.2.12


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters