Hi, I'm fairly new to AIX and I have been tasked with upgrading our customers version of SPLUNK from 9.0.1 to 9.4.1, the below steps are what I did which seemed to work and now have version 9.4.1 on the system: Implementation Plan:: Create a copy/backup of the splunkforwarder folder: cp -r /opt/splunk/splunkforwarder /opt/splunk/splunkforwarder_backup_$(date +%F) mkdir /tmp/splunk_temp tar -xvf /nim/media/SOFTWARE/splunk/Splunk-9.4.1/splunkforwarder-9.4.1-2f7817798b5d-aix-powerpc.tar -C /tmp/splunk_temp /opt/splunk/splunkforwarder/bin/splunk stop /opt/splunk/splunkforwarder/bin/splunk status rsync -av /tmp/splunk_temp/splunkforwarder/ /opt/splunk/splunkforwarder/ rm -rf /tmp/splunk_temp chown -R 510:510 /opt/splunk/splunkforwarder chown -R root:system /opt/splunk/splunkforwarder/var /opt/splunk/splunkforwarder/bin/splunk status <<<< This command will kick in the migration and upgrade to 9.4.1 /opt/splunk/splunkforwarder/bin/splunk start /opt/splunk/splunkforwarder/bin/splunk status <<<<< Shows splunk has been upgraded to 9.4.1 I've also read the Install the universal forwarder on AIX instructions but just wanted to check if the way i've upgraded splunk actually is going to work even though it says it has been upgraded ?? Thanks
... View more