Rollback a Cribl Stream Linux Worker to Older Version

Objective

Roll back the code version from newest to older.

Environment

• Linux Worker

Procedure

1. In the Cribl UI, go to Settings > Global > Upgrade.
2. Turn off (toggle to the left) autoupgrade for the worker group. Make sure that toggle is off.

   

3. Do this one worker at a time.
4. As a privileged use either root or as sudo stop cribl:
   systemctl stop cribl.service
5. Wait until everything shuts down and make sure that there are no more processes running: ps -ef |grep -i cribl
   ps -ef |grep -i cribl
6. If anything did not stop by systemctl, kill the process.
7. Wait a little and re-check.
8. If you no longer see processes running, than procees to backing up and reinstalling:
   cd /opt

9. Backup:
   sudo cp -apr cribl cribl_backup_$(date +%Y%m%d%H%M%S)

10. Check if the back was made by running ls -latr
11. Go to https://cribl.io/download → Past Releases, and pick the previous stable version and correct platform/arch (x64, ARM, etc.), then download the .tgz for Stream.
12. Make sure you are still in /opt or just run cd /opt
13. Download the tar file to /opt
14. Next untar the file in the /opt:
    sudo tar -xvf cribl-4.17.0-7e952fa7-linux-x64.tgz
15. Fix the privileges:
    sudo chown -R cribl:cribl /opt/cribl

16. Start the process:
    sudo systemctl start cribl

17. Check by running:
    ps -ef |grep -i cribl
18. You can run sudo systemctl status cribl.service to get the status of the service; however, we recommend making sure that the Cribl processes are up.
19. Check in UI that the worker is connected. The result should look something like this:

    

    Note this will only roll back the code version, not the changes done by commit and deploy.