https://community.splunk.com/t5/Getting-Data-In/upgrading-from-lightweight-forwarder-to-universal-forwarder/m-p/99750#M20858 <P>Yes, the checkpoint file will be honored, but back up your configs as changes don't occur until restart of splunk. Also verify the $SPLUNK_HOME/var/log/splunk/migration.log, this will tell you which files have been modified. What you are mostly concered about is the fishbucket directory.</P> <P>Here some additional reading:</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/5.0/Deploy/Deploymentoverview#Migrating_from_a_light_forwarder.3F" target="_blank">Migrating_from_a_light_forwarder</A></P> <P><A href="http://docs.splunk.com/Documentation/Splunk/4.3.4/Deploy/Upgradethenixuniversalforwarder" target="_blank">Upgradethenixuniversalforwarder</A></P> <P><A href="http://blogs.splunk.com/2008/08/14/what-is-this-fishbucket-thing/" target="_blank">what-is-this-fishbucket-thing</A> - Found this very informative, but a little out of date.</P> <P>Hope this helps or gets you started.</P> Mon, 28 Sep 2020 12:40:44 GMT bmacias84 2020-09-28T12:40:44Z https://community.splunk.com/t5/Getting-Data-In/upgrading-from-lightweight-forwarder-to-universal-forwarder/m-p/99749#M20857 <P>Just checking we are planning on upgrading a lightweight forwarder to a universal forwarder. <BR /> the plan is<BR /> install the universal forwarder<BR /> create the /opt/splunkforwarder/old_splunk.seed<BR /> Set a deployment server in /opt/splunkforwarder/etc/system/local/deploymentclient.conf<BR /> start the universal forwarder. </P> <P>What I am wondering, will the checkpoint file be honored, if I start the server then wait for the deployment server to send apps the universal forwarder. The app contains the indexes and inputs etc for each of the feeds that the server needs.</P> <P>Thanks</P> Tue, 23 Oct 2012 20:05:40 GMT https://community.splunk.com/t5/Getting-Data-In/upgrading-from-lightweight-forwarder-to-universal-forwarder/m-p/99749#M20857 imacdonald2 2012-10-23T20:05:40Z https://community.splunk.com/t5/Getting-Data-In/upgrading-from-lightweight-forwarder-to-universal-forwarder/m-p/99750#M20858 <P>Yes, the checkpoint file will be honored, but back up your configs as changes don't occur until restart of splunk. Also verify the $SPLUNK_HOME/var/log/splunk/migration.log, this will tell you which files have been modified. What you are mostly concered about is the fishbucket directory.</P> <P>Here some additional reading:</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/5.0/Deploy/Deploymentoverview#Migrating_from_a_light_forwarder.3F" target="_blank">Migrating_from_a_light_forwarder</A></P> <P><A href="http://docs.splunk.com/Documentation/Splunk/4.3.4/Deploy/Upgradethenixuniversalforwarder" target="_blank">Upgradethenixuniversalforwarder</A></P> <P><A href="http://blogs.splunk.com/2008/08/14/what-is-this-fishbucket-thing/" target="_blank">what-is-this-fishbucket-thing</A> - Found this very informative, but a little out of date.</P> <P>Hope this helps or gets you started.</P> Mon, 28 Sep 2020 12:40:44 GMT https://community.splunk.com/t5/Getting-Data-In/upgrading-from-lightweight-forwarder-to-universal-forwarder/m-p/99750#M20858 bmacias84 2020-09-28T12:40:44Z