1. This is a quite old thread. You'd be better off by starting a new one (possibly putting link to this one for reference). 2. Generally speaking, as a good practice: - don't mix management with package manager with manually dropping in files. It can end badly. - If you have a package for your system it's often (although not always; there are sometimes very badly built packages) a better solution I'm not sure about Splunk but depending on how/where you installed your software before, the RPM might not fit exactly that layout. So while you can try to install RPM package over a tarball-based /opt/splunk, I think I'd try to go for backup/remove/install/restore. Oh, and don't try to mess with your production server without testing it in dev environment.
... View more