I have splunk installed on my Solaris 10 server.
I need to upgrade to 6.6.11 version. Can I just install over older version or should I remove it?
Could I just rename /opt/splunkforwarder directory to
/opt/no.splunkforwarder directory and just perform pkgadd install?
Hi ,
you can follow the below steps:
Stop splun on forwarder, untar the new version to your $SPLUNK_Home, start splunk, it will then notice that there is a new version and ask you if you want to upgrade. Thats it.
Check out this for more information https://docs.splunk.com/Documentation/Forwarder/7.2.3/Forwarder/Upgradethenixuniversalforwarder
If it helped please accept the answer 🙂
How about pkgrm splunkforwarder and then pkgadd newsplunkforwarder?