Sunday, March 8, 2015

Easiest Way to Upgrade Splunk to a New Version

In short, you just install it over the top of the existing install. As a precaution, you could copy everything in /opt/splunk/ before you do the upgrade.


This is a verbatim copy-paste of the easiest way I’ve found to install Splunk. Yeah, you’re literally just overwriting the existing files with the new install. All your configs, index references, searches, apps, etc. will not be touched (provided you don’t have anything particularly custom of course).


I’m using CentOS 6.6, but any Linux variant should work fine.


You want the .tgz file from here (use wget to downoad the file to the /tmp directory on your server):

http://ift.tt/18rHcT7. Mine looked like this:




wget -O splunk-6.2.2-255606-Linux-x86_64.tgz 'http://ift.tt/1FAMGVO'

--2015-02-26 01:30:13-- http://ift.tt/1FAMGVO


Extract splunk and put it in the /opt directory:



tar xvzf splunk-*.tgz -C /opt


Run Splunk for the first time:



/opt/splunk/bin/splunk start --accept-license


Set Splunk to start at boot (just to make sure):



/opt/splunk/bin/splunk enable boot-start





No comments:

Post a Comment