topic Splunk universal forwarder upgrade in Getting Data In

Splunk universal forwarder upgrade

Praz_123 — Mon, 03 Aug 2026 17:03:54 GMT

I need to upgrade splunk uf in my windows VM from 8.2 version to 9.3.11 can anyone help me with the steps how will I do as I need all steps in brief and if possible please share screenshot. Also please share the backup how will I take for 8.2 splunk universal fowarder

Also I had downloaded version of 9.3.11 splunk uf .exe file

Re: Splunk universal forwarder upgrade

richgalloway — Mon, 03 Aug 2026 12:50:24 GMT

Splunk has a manual describing how to upgrade the Windows Universal Forwarder (UF). See https://help.splunk.com/en/splunk-enterprise/forward-and-process-data/universal-forwarder-manual/9.4/upgrade-or-uninstall-the-universal-forwarder/upgrade-the-universal-forwarder

Re: Splunk universal forwarder upgrade

gcusello — Tue, 04 Aug 2026 08:37:00 GMT

Hi @Praz_123 ,

the @richgalloway 's answer should answer to your question.

In addition I could say also that, if you need to upgrade many clients and you have a Deployment Server, you could use the "TA - Splunk UF Upgrade Automation for Windows" ( https://splunkbase.splunk.com/app/8802 ), but only from the next upgrade because it runs from the 9.0 version.

Ciao.

Giuseppe

Re: Splunk universal forwarder upgrade

Praz_123 — Thu, 13 Aug 2026 07:40:34 GMT

@gcusello @richgalloway I already flow those steps to have an upgrade but am getting issue like .

While am running the line -

Start-Process msiexec.exe -ArgumentList "/i `"$msiFile`" AGREETOLICENSE=Yes" -Wait

So it is asking me with the old version of the splunk UF and in the splunk release also on my computer I could not get the 8.2 version of the splunk UF but the path what it is ahowing the person had left the organization so how can i get that package .