Awesome, thanks for confirming that! FWIW, I found the following sequence to be the most reliable when upgrading our UFs: 1. Disable the KVStore in server.conf (this gets rid of a ~15min timeout during the upgrade) 2. Start the upgrade 3. Stop the Splunk service 2 and 3 might seem backwards but I'm deploying the upgrade as a TA from the deployment server using powershell so if I stop the service first, it'll end my script.
... View more
I'm running into the same issue with my upgrade from 8.2.x to 9.0.2. The upgrade seems to somewhat work as Splunk Cloud reports the UF as 9.0.2 and logs are ingestion; however, locally the UF still shows as v8.2.x after the upgrade. Can you share what Splunk support comes back with? I may also open a ticket.
... View more