in-place upgrade vs fresh install.

[Namo]

Hi Team,

My query is on in-place upgrade vs fresh install.

I am new to splunk upgrade. my directory structure in linux  is /m01/app/splunk .I did a fresh install approach and upgraded to 10.2.0 by  extracting  the tar into /m01/app/

Post upgrading to 10.2.0 , the old dashboard,hec settings,few apps are gone.

Do i need to install on /m01/app/splunk rather than /m01/app to retain the old settings. Please advise.

[isoutamo]

What you are meaning with "a fresh install approach"?
I hope that this not mean that you 1st remove old installation and then install a new version?

If you have done that then it's time to restore anything from backups.

Otherwise all those question and suggestions by @PickleRick are valid.

[PickleRick]

OK. You did.... something wrong. Apparently for some reason you're using manual installation process instead of going with the packages for your distro.

It seems you've probably unpacked the archive into wrong folder. Whether you've overwritten some existing files and damaged your existing installation or "just" installed another copy alongside the one you already had - we don't know. Diagnosing and fixing your current state - especially since you don't have much experience with Splunk - requires checking current state in the first place. So it's best - in order not to break anything more - that you engage either Splunk's Professional Services or your local friendly Splunk Partner.