Upgrading Solaris 10 Forwarder to 6.6.11

[surfshooterhi]

I have splunk installed on my Solaris 10 server.
I need to upgrade to 6.6.11 version. Can I just install over older version or should I remove it?

Could I just rename /opt/splunkforwarder directory to
/opt/no.splunkforwarder directory and just perform pkgadd install?

[rohitvjoshi]

Hi ,
you can follow the below steps:

1. Place you new version of forwarder file into /home/splunk location
2. Go to /home/splunk/splunkforwarder/bin
3. execute ./splunk stop
4. go back to /home/splunk folder and run tar -xvzf
5. after Unzipping , go to /home/splunk/splunkforwarder/bin
6. start the server using ./splunk start
7. once process is done ,run ./splunk version
8. you will get the latest vesrion number.

[dkeck]

Stop splun on forwarder, untar the new version to your $SPLUNK_Home, start splunk, it will then notice that there is a new version and ask you if you want to upgrade. Thats it.

Check out this for more information https://docs.splunk.com/Documentation/Forwarder/7.2.3/Forwarder/Upgradethenixuniversalforwarder

[dkeck]

If it helped please accept the answer 🙂

[surfshooterhi]

How about pkgrm splunkforwarder and then pkgadd newsplunkforwarder?

[dkeck]

Have a look at this https://answers.splunk.com/answers/5963/does-pkgrm-stop-a-splunk-forwarder-in-a-clean-way-on-solaris...