Work with signature validation files for upgrading

Download the forwarder's signature file

To download your signature file, in splunk.com select your forwarder version, click "More" and select "Download x509 Signature".

  • Signature validation is mandatory for all package types (RPM, DEB, and TGZ).
  • Only the universal forwarder version 9.0 and later are signed.

The remote upgrader for Linux universal forwarders performs validation with the universal forwarder package and signature file.

To verify that you have the correct signature file, the signature filename should be the <universal forwarder package name>.sig. For example, if the universal forwarder package name is: 

splunkforwarder-9.3.2-d8bb32809498-Linux-x86_64.tgz

then the signature filename is: 

splunkforwarder-9.3.2-d8bb32809498-Linux-x86_64.tgz.sig.