Is there any issue or special steps needed to do an upgrade using RPM if the initial installation used the tar file?
Refer this doc:
You can replace an existing Splunk Enterprise installation with an RPM package. It is recommended that you should first test in your test environment before attempting changes in prod.
Let me know if this helps!!
View solution in original post
Thank you, you are 100% correct. Over the weekend, I set up a test box with an older version using a tar install and tried upgrading using RPM so your answer is spot on. Thanks for the reply.