Splunk upgradation method

[sanjubaba]

If Splunk enterprise setup is done using .deb package at first place. Can the Splunk enterprise version upgradation be done by tar method afterwards?

[isoutamo]

Yes you can do it, but then your package manager is not aware of this new version. That can be an issue or not? Anyhow you must document that so that other administrators are also aware of it. Personally I want always to use same method to update that has used installation, it generates less issues/hassle later on.
r.ismo

[sanjubaba]

@isoutamo thanks for your reply.

Can you help me out on how to identify the previously installed version of Splunk enterprise on Ubuntu Linux machine?

[isoutamo]

Check with package manager which version is installed and then verify what splunk said. You could found that e.g. manifest file on splunk home or from internal logs or splunk -version
https://docs.splunk.com/Documentation/Splunk/8.0.6/Troubleshooting/CheckSplunkversion
R. Ismo

[sanjubaba]

@isoutamo thank you for your Reply.

And how to identify the installation method which was followed earlier during Splunk enterprise installation. Whether it's done by using package or tar method?

[isoutamo]

https://docs.splunk.com/Documentation/Splunk/8.0.6/Installation/InstallonLinux
dpkg —status splunk shows if it has installed with package manager and which version it was.