Splunk - Deploy/Upgrade Splunk Universal Forwarder 7.1.3 (Windows)
Log In or Register to download the BES file, and more.

0 Votes

Description

Deploy Splunk Light Forwarder 7.1.3

This fixlet installs the Splunk Universal Forwarder on Windows x64 operating systems.

The fixlet will ask for the address and mangement port of the deployment server in your environment. Please request this information from your Splunk administrator before installing or else the forwarder will only be managed locally. If a deployment server is not defined, the value is not configured.


Property Details

ID25550
StatusBeta - Preliminary testing ready for more
TitleSplunk - Deploy/Upgrade Splunk Universal Forwarder 7.1.3 (Windows)
CategorySplunk
Download Size55.79 MB
SourceSplunk
Source Release Date9/24/2015 12:00:00 AM
Keywordssplunk, forwarder, install, windows
Added by on 9/24/2018 6:16:38 PM
Last Modified by on 9/24/2018 6:20:36 PM
Counters 115 Views / 0 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 0 ratings. ** Log In or Register to add your rating.

Relevance

Used in 1 fixlet   * Results in a true/false
Show indented relevance
if name of operating system contains "Win2" AND name of operating system does not contain "Win2003" AND not exists name whose (it contains "Win2008" AND it does not contain "R2") of operating system then exists service "SplunkForwarder" AND (substring after "=" of line containing "VERSION" of file "splunk.version" of folder "C:\Program Files\SplunkUniversalForwarder\" as trimmed string as version < "7.1.3") OR not exists service "SplunkForwarder" else false

Actions

Action 1 (default)

Action Link Click here to deploy this action.
Script Type BigFix Action Script
action parameter query "ds" with description "Hostname of deployment server and management port. Leave empty for upgrade or local management."

//OS Check
continue if {name of operating system contains "Win"}

//Grab installer and configuration files
prefetch splunkforwarder.msi sha1:ef91686217fe13d6faf2ac6eb78b56a7ed3b541a size:58499072 http://download.splunk.com/products/universalforwarder/releases/7.1.3/windows/splunkforwarder-7.1.3-51d9cac7b837-x64-release.msi

//Parameter defining the version being upgraded to
parameter "version"="7.1.3"

//Stop existing installation of Splunk
if {exists file "C:\Program Files\SplunkUniversalForwarder\bin\splunk.exe"}
waithidden cmd.exe /C "C:\Program Files\SplunkUniversalForwarder\bin\splunk.exe" stop
endif

//Create the it_info folder if it doesn't exist
if {not exists folder "C:\it_info"}
waithidden cmd.exe /C mkdir C:\it_info
endif

//Install Forwarder
if {parameter "ds" of action as string is not ""}
waithidden msiexec.exe /i "__Download\splunkforwarder.msi" /qn /l*v c:\it_info\Splunk_Forwarder_{parameter "version" of action as string}_Install.log AGREETOLICENSE=YES LAUNCHSPLUNK=1 DEPLOYMENT_SERVER="{parameter "ds" as string}" GENRANDOMPASSWORD=1
elseif {not exists folder "C:\Program Files\SplunkUniversalForwarder"}
waithidden msiexec.exe /i "__Download\splunkforwarder.msi" /qn /l*v c:\it_info\Splunk_Forwarder_{parameter "version" of action as string}_Install.log AGREETOLICENSE=YES LAUNCHSPLUNK=1 GENRANDOMPASSWORD=1
else
waithidden msiexec.exe /i "__Download\splunkforwarder.msi" /qn /l*v c:\it_info\Splunk_Forwarder_{parameter "version" of action as string}_Install.log AGREETOLICENSE=YES LAUNCHSPLUNK=1
endif
Success Criteria

This action will be considered successful when the applicability relevance evaluates to false.


Sharing

Social Media:
Share this page on Yammer

Comments

Log In or Register to leave comments!