Hello team. Is there an upgrade path to upgrade Splunk on my heavy forwarders? Or is it just a matter of installing the new version of the Splunk RPM? I don't see any docs in Splunk about breaks or preparations for this upgrade.
One more place to check how to update and what you need to consider is https://lantern.splunk.com/Splunk_Platform/Product_Tips/Enterprise/Upgrading_Splunk_Enterprise
This post will get you started:
One more place to check how to update and what you need to consider is https://lantern.splunk.com/Splunk_Platform/Product_Tips/Enterprise/Upgrading_Splunk_Enterprise
The Release Notes will have any upgrade considerations. If you stay current then installing the new .rpm is the way.