Installation

Upgrade Splunk Enterprise in Linux

jaracan
Communicator

Hi Team,

I am planning to upgrade Splunk Enterprise from version 6.5.2 to 7.0.3 in Linux Redhat and currently looking on this reference
http://docs.splunk.com/Documentation/Splunk/7.1.0/installation/UpgradeonUNIX

I am using tar file. And in step 5 in the link above, it says.
5. To upgrade and migrate, install the Splunk Enterprise package directly over your existing deployment.
If you use a .tar file, expand it into the same directory with the same ownership as your existing Splunk Enterprise instance.
This overwrites and replaces matching files but does not remove unique files.
tar xzf splunk-7.x.x-.tgz -C /splunk/parent/directory

My question is what do we mean by "/splunk/parent/directory"?
My current $SPLUNK_HOME is /opt/splunk.

Does this mean I will just use the command below:
tar -xzf splunk-7.0.3-fa31da744b51-Linux-x86_64.tgz -C /opt

OR this one

tar -xzf splunk-7.0.3-fa31da744b51-Linux-x86_64.tgz -C /opt/splunk

Thanks in advance.

Labels (2)
1 Solution

p_gurav
Champion

You have to run this command :

tar -xzf splunk-7.0.3-fa31da744b51-Linux-x86_64.tgz -C /opt

i.e splunk parent directory means where splunk folder lies.

View solution in original post

p_gurav
Champion

You have to run this command :

tar -xzf splunk-7.0.3-fa31da744b51-Linux-x86_64.tgz -C /opt

i.e splunk parent directory means where splunk folder lies.

Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...