Upgrade to version 3.2.0 of the Content Pack for Splunk Observability Cloud

If you have installed a previous version of the content pack, you can upgrade to the latest version. Review the following high-level upgrade steps before you begin:

1. Upgrade the Splunk App for Content Packs to v2.1.0.
2. Delete the entities of the Splunk Observability Cloud Content Pack.
3. Install Content Pack for Splunk Observability Cloud v3.2.0.

Prerequisites for upgrade

Create a full backup of your ITSI environment in case you need to revert the upgrade. For more information about creating a backup, see Create a Full Backup in the Administer Splunk IT Service Intelligence manual.

Step 1. Upgrade the Splunk App for Content Packs

1. Check which ITSI version is compatible with Splunk App for Content Packs in the Compatibility with ITSI and ITE Work table.
2. Download Splunk App for Content Packs v2.1.0 from Splunkbase.
3. Follow the installation steps to upgrade the Splunk App for Content Packs.

Step 2. Delete the entities of the Splunk Observability Cloud Content Pack

1. Open ITSI.
2. Navigate to Configuration > Entity Management.
3. Filter and delete all the Entities of Splunk Observability Cloud Content Pack.

Step 3. Install the Content Pack for Splunk Observability Cloud Content Pack v3.2.0

Follow these steps to re-install the content pack. Make sure to perform the following steps while in Step 5 of Install the content pack from the Splunk App for Content Packs.

1. Select all the ITSI objects of the content pack Already Installed section in Choose which objects to install.
2. Select the Replace Existing parameter in Choose a conflict resolution rule for the objects you install.

Wait for entity discovery searches to re-discover the entities again.