Documentation

Contents
Contents
Contents
Contents
!
This documentation applies to a beta version of uberAgent (docs for the latest official release)

Upgrading uberAgent

When a new version of uberAgent is available you need to do the following in order to update your existing installation.

Understand What is New and Changed

Please read the changelog. Changes might affect uberAgent’s configuration, for example.

Depending on the nature of the changes made for a new version it may be necessary to update custom apps that make use of the data collected by uberAgent.

uberAgent Splunk Indexer and Dashboard Apps

Before upgrading, please make a backup of the following files:

$SPLUNK_HOME\etc\apps\uberAgent\lookups\appnameidmapping.csv
$SPLUNK_HOME\etc\apps\uberAgent\lookups\hostinfo.csv
$SPLUNK_HOME\etc\apps\uberAgent\lookups\hostinfo2.csv
$SPLUNK_HOME\etc\apps\uberAgent\lookups\networktargetperformance_targetlist.csv
$SPLUNK_HOME\etc\apps\uberAgent\lookups\processstartup_processlist.csv

Delete the uberAgent app directories:

$SPLUNK_HOME\etc\apps\uberAgent
$SPLUNK_HOME\etc\apps\uberAgent_indexer

Restart Splunk.

Install the new versions of the Splunk apps as described here.

Restore the files you backed up in the first step described above, overwriting the default versions of these files that came as part of the download:

$SPLUNK_HOME\etc\apps\uberAgent\lookups\appnameidmapping.csv
$SPLUNK_HOME\etc\apps\uberAgent\lookups\hostinfo.csv
$SPLUNK_HOME\etc\apps\uberAgent\lookups\hostinfo2.csv
$SPLUNK_HOME\etc\apps\uberAgent\lookups\networktargetperformance_targetlist.csv
$SPLUNK_HOME\etc\apps\uberAgent\lookups\processstartup_processlist.csv

uberAgent on the Endpoints

uberAgent’s MSI installer has all the logic to upgrade an installation automatically preserving the current settings. Just run the installer again using your deployment method of choice as described here.

Note: customizations to the configuration in the installation directory are not retained during an upgrade. Such customizations must be re-applied after the upgrade. We recommend to store the configuration files outside the installation directory.

Elasticsearch

New uberAgent versions generally come with additional fields. This makes it necessary to update the index template. To do that, overwrite the existing index template with the new version. Please note that templates are applied to new indexes only. Existing indexes keep their templates.

Leave a Reply

Your email address will not be published. Required fields are marked *