Update slpunkclouduf.spl app on Windows Universal Forwarder- What is the syntax we should use to force the update?

[cpkg]

Hi,

Got a message from Splunk that our universal forwarder certificate package will be expiring soon and trying to update the package following their instructions for installing the credentials package (which works on a new/clean install) it returns that we need to use the update argument:

App "100_XXXX_splunkcloud" already exists; use the "update" argument to install anyway

This is the syntax used (following Splunk documentation) that returns the message:

 .\splunk install app ../etc/apps/splunkclouduf.spl -auth xxx:xxxxxxx

 What is the syntax we should use to force the update? I have tried every which way that I can think of and nothing works. Thanks!

[isoutamo · Accepted solution]

You should add 

-update 1

to your

splunk install app

command 

[cpkg]

@isoutamothat worked perfectly, thanks!