Previous Topic: Do I need to Install Splunk on log servers? | Next Topic: After deleting a host it reappears with huge amount of events
I remember reading an article on the Splunk website about how to upgrade a Splunk installation to a new version: basically indicating which files and folders need to be kept. Could someone please remind me?
My last attempt just caused the whole data repository to get wiped out.
Thanks.
If you are using a tar ball, you can just stop splunk, un-tar the tar ball over your existing installation, then start splunk. If you are using rpm you should use rpm- u. Even if you are using pkg (and need to pkgrm and pkgadd), splunk will still live the splunk/etc and splunk/var directories behind, preserving your data and customizations.
What method did you use?
You must be logged in to post a reply.
Flash required to play this video.
Click here to download the free Flash Player.