Change the version number in this page to what will be upgraded too...!!!
 
Check for where splunk is:    DoAnsibleRun.bash 'ps -ef |egrep -i splunk | egrep -v grep' |egrep -v 'FAILED|Shared|non-zero'

Download and Stage tarball.
1. cd /usr/local/src
2. mkdir Splunk-8.1.1
3. cd Splunk-8.1.1
4. wget http://centosone.binghamton.edu/Upload/splunkforwarder-8.1.1-605df3f0dfdd-Linux-x86_64.tgz
     :
   Backup Splunk directories.
5. /opt/splunkforwarder/bin/splunk --version
6. cd /opt
7. tar -cvf splunkforwarder-<current-version>.tar splunkforwarder
8. tar -cvf splunkforwarder_local-8.1.1.tar splunkforwarder/etc/system/local/
9. mv splunkforwarder splunkforwarder-<current-version>
10. cd /opt
11. tar -xvf /usr/local/src/Splunk-8.1.1/splunkforwarder-<current-version>.tar
12. /opt/splunkforwarder/bin/splunk start ### Read and maybe takes notes. Enter a user and password.
    Make special note of the files in : /opt/splunkforwarder/etc/system/local
    
    • server.conf ### This is generating by the first start
    • inputs.conf ### This has the Host Name and local log files

      host = HOSTNAME.binghamton.edu
      [monitor:////var/log/LOGNAME.log
      disabled = false
      sourcetype = WHO NOW provides
      index = WHO NOW provides
       
      outputs.conf ### WHO NOW Provides these Values
          
       /opt/splunkforwarder/bin/splunk stop