Hello Splunkees, what are the differences between the different options for app updates? I know 3 diffentent ways to update an app: 1) Via webinterface: Apps -> Manage Apps -> Install app from file -> Check 'Upgrade app. Checking this will overwrite the app if it already exists.' 2) Via CLI: ./splunk install app <app_package_filename> -update 1 -auth <username>:<password> 3) Extract the content of the app.tgz to $SPLUNK_HOME/etc/apps/ (if app already exists, override files) and after that restart splunk service. Background of my question: I want to implement an automated app update process with ansible for our environment and I want to use the smartest method. Currently, we're using Splunk 9.1.5. Thank you! BR dschwarz
... View more