Deployment Architecture

How to upgrade splunk RPM and keep splunk user file permissions?

gfriedmann
Communicator

I am using the RPM package for splunk. I also utilize the "run splunk as splunk user" option.

But there is a problem. I have to install an RPM as root. When i upgrade using the RPM, it stops splunk, upgrades the files, and then restarts splunk as root. After this, the file permissions are all messed up, with newly created files being owned by root.

How do others deal with this? Might it be fine to upgrade an RPM install using the .tgz package?

Tags (3)
0 Karma

gfriedmann
Communicator

Actually, splunk upgrade doesn't auto-start splunk as root.

After running

sudo rpm -U splunk-4.2.2...rpm

Then start splunk as the splunk user like this

 sudo su - splunk -c "splunk start --answer-yes --accept-license --no-prompt"
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...