After upgrading Splunk Universal Forwarders from version 8.1.x to 9.2.x on Windows machines in a distributed environment, my question is: Is it mandatory for both the old and new services to run simultaneously (in parallel), or should only the new version be running ?
also the old version, must be deleted or not ?
