I am using tar file. And in step 5 in the link above, it says. 5. To upgrade and migrate, install the Splunk Enterprise package directly over your existing deployment. If you use a .tar file, expand it into the same directory with the same ownership as your existing Splunk Enterprise instance. This overwrites and replaces matching files but does not remove unique files. tar xzf splunk-7.x.x-.tgz -C /splunk/parent/directory
My question is what do we mean by "/splunk/parent/directory"? My current $SPLUNK_HOME is /opt/splunk.
Does this mean I will just use the command below: tar -xzf splunk-7.0.3-fa31da744b51-Linux-x86_64.tgz -C /opt
OR this one
tar -xzf splunk-7.0.3-fa31da744b51-Linux-x86_64.tgz -C /opt/splunk