Upgrading Splunk apps, what is the best practice or things to backup before hand?

[Pierceyuk]

I see that a few apps need an upgrade in my environment ('Splunk Support - LDAP Commands', 'Windows Technology Add-on' to name two).

What is the best practice when it comes to upgrading? Should I just hit the 'Upgrade to version number' and hope for the best? Or are there things I could do before hand to ensure these upgrades go as smoothly as possible with minimal risk involved.

Also I have two search heads, does this make it easier (if I break one I have the other etc...)

Any advice or pointers would be very useful

[lukejadamec · Accepted solution]

You should make a backup copy of the App folder that is being backed up on each search head. You will likely not run into any problems, but if you do the backup will come in handy.

[Pierceyuk]

Thanks, Yeah its always better to have some sort of backup floating around.