on apt-get upgrade or apt-get install, splunk does NOT stop/start it's service.
that's fine, but if an operator misses starting it again before reboot - the whole machine will hang on boot.. waiting for you input.. with or without ssh starting up first. which leaves you with a remote machine hung and inaccessible.
─rc───S20splunk───splunk───python───more
if splunk has installed it's init.d to startup on boot, can we have a switch to accept the EULA? or perhaps the EULA should persist between versions (as much as possible).
Yes there is, and it's documented here
Your startup command becomes ./splunk start --accept-license