Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit 2dd6501

Browse files
committed
adding variable for output reload workaround and disabling by default
1 parent bab91c1 commit 2dd6501

File tree

1 file changed

+18
-9
lines changed

1 file changed

+18
-9
lines changed

src/installes.sh

Lines changed: 18 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -65,8 +65,9 @@
6565
# 20250505 add auto workaround for outputs reload that can lead to crash
6666
# 20250611 up to 8.1.0
6767
# 20250825 up to 8.1.1
68+
# 20250825 adding variable for output reload workaround and disabling by default
6869

69-
VERSION="20250825a"
70+
VERSION="20250825b"
7071

7172
SCRIPTNAME="installes"
7273

@@ -75,6 +76,9 @@ ESINSTALLERNFORCENOTA="no"
7576

7677
INSTALLWITHSETUP="yes"
7778

79+
# no or yes
80+
ENABLEWORKAROUNDOUTPUTRELOAD="no"
81+
7882
###### function definition
7983

8084
function echo_log_ext {
@@ -504,18 +508,23 @@ if [ "${PROCEEDSKIPINSTALL}" == "N" ]; then
504508
# ES install/upgrade
505509
${SPLUNK_HOME}/bin/splunk install app ${ESAPPFULL} -update true
506510

507-
A=`find /opt/splunk/etc/apps/SplunkEnterpriseSecuritySuite/install -name "Splunk_TA_ueba*spl" -print`
508-
#Splunk_TA_ueba-3.2.0-73256.spl
509-
echo "repackaging to add simple outputs reload in $A"
510-
ls -l $A
511-
tar -C "/tmp" -xf $A
512-
cat << EOT >> /tmp/Splunk_TA_ueba/default/app.conf
511+
if [ "${ENABLEWORKAROUNDOUTPUTRELOAD}" == "yes" ] || [ "${ENABLEWORKAROUNDOUTPUTRELOAD}" == "YES" ] || [ "${ENABLEWORKAROUNDOUTPUTRELOAD}" == "Y" ] || [ "${ENABLEWORKAROUNDOUTPUTRELOAD}" == "y" ]; then
512+
echo "enabling workaround for spl output reload issue"
513+
A=`find /opt/splunk/etc/apps/SplunkEnterpriseSecuritySuite/install -name "Splunk_TA_ueba*spl" -print`
514+
#Splunk_TA_ueba-3.2.0-73256.spl
515+
echo "repackaging to add simple outputs reload in $A"
516+
ls -l $A
517+
tar -C "/tmp" -xf $A
518+
cat << EOT >> /tmp/Splunk_TA_ueba/default/app.conf
513519
[triggers]
514520
reload.outputs = simple
515521
EOT
516522

517-
tar -C"/tmp" -zcf $A Splunk_TA_ueba
518-
ls -l $A
523+
tar -C"/tmp" -zcf $A Splunk_TA_ueba
524+
ls -l $A
525+
else
526+
echo "disabing workaround for spl output reload issue"
527+
fi
519528

520529
# ${SPLUNK_HOME}/bin/splunk install app ${ESAPPFULL} -update true -auth admin:${PASSWORD}
521530
#App 'xxxxxx/yyyyyy/splunk-enterprise-security_472.spl' installed

0 commit comments

Comments
 (0)