65
65
# 20250505 add auto workaround for outputs reload that can lead to crash
66
66
# 20250611 up to 8.1.0
67
67
# 20250825 up to 8.1.1
68
+ # 20250825 adding variable for output reload workaround and disabling by default
68
69
69
- VERSION=" 20250825a "
70
+ VERSION=" 20250825b "
70
71
71
72
SCRIPTNAME=" installes"
72
73
@@ -75,6 +76,9 @@ ESINSTALLERNFORCENOTA="no"
75
76
76
77
INSTALLWITHSETUP=" yes"
77
78
79
+ # no or yes
80
+ ENABLEWORKAROUNDOUTPUTRELOAD=" no"
81
+
78
82
# ##### function definition
79
83
80
84
function echo_log_ext {
@@ -504,18 +508,23 @@ if [ "${PROCEEDSKIPINSTALL}" == "N" ]; then
504
508
# ES install/upgrade
505
509
${SPLUNK_HOME} /bin/splunk install app ${ESAPPFULL} -update true
506
510
507
- A=` find /opt/splunk/etc/apps/SplunkEnterpriseSecuritySuite/install -name " Splunk_TA_ueba*spl" -print`
508
- # Splunk_TA_ueba-3.2.0-73256.spl
509
- echo " repackaging to add simple outputs reload in $A "
510
- ls -l $A
511
- tar -C " /tmp" -xf $A
512
- cat << EOT >> /tmp/Splunk_TA_ueba/default/app.conf
511
+ if [ " ${ENABLEWORKAROUNDOUTPUTRELOAD} " == " yes" ] || [ " ${ENABLEWORKAROUNDOUTPUTRELOAD} " == " YES" ] || [ " ${ENABLEWORKAROUNDOUTPUTRELOAD} " == " Y" ] || [ " ${ENABLEWORKAROUNDOUTPUTRELOAD} " == " y" ]; then
512
+ echo " enabling workaround for spl output reload issue"
513
+ A=` find /opt/splunk/etc/apps/SplunkEnterpriseSecuritySuite/install -name " Splunk_TA_ueba*spl" -print`
514
+ # Splunk_TA_ueba-3.2.0-73256.spl
515
+ echo " repackaging to add simple outputs reload in $A "
516
+ ls -l $A
517
+ tar -C " /tmp" -xf $A
518
+ cat << EOT >> /tmp/Splunk_TA_ueba/default/app.conf
513
519
[triggers]
514
520
reload.outputs = simple
515
521
EOT
516
522
517
- tar -C" /tmp" -zcf $A Splunk_TA_ueba
518
- ls -l $A
523
+ tar -C" /tmp" -zcf $A Splunk_TA_ueba
524
+ ls -l $A
525
+ else
526
+ echo " disabing workaround for spl output reload issue"
527
+ fi
519
528
520
529
# ${SPLUNK_HOME}/bin/splunk install app ${ESAPPFULL} -update true -auth admin:${PASSWORD}
521
530
# App 'xxxxxx/yyyyyy/splunk-enterprise-security_472.spl' installed
0 commit comments