for us the upgrade worked when we added the parameter: USE_LOCAL_SYSTEM=1 and the service was started as Local System when we did an uninstall of 9.1.2 and new install of 9.1.3 without the parameter the service was installed with the user NT SERVICE\SplunkForwarder
... View more