Upgrade to a new version of Splunk App for Infrastructure

Integration with the Splunk App for Infrastructure is enabled by default. If you're upgrading ITSI while the Splunk App for Infrastructure is already installed in your environment, the Splunk App for Infrastructure version is automatically upgraded to the most recent version.

When you upgrade to a new version of Splunk App for Infrastructure, install the new package directly over your existing deployment in Splunk Enterprise.

Before you upgrade

Read this section before you upgrade Splunk App for Infrastructure to a new version, learn important information and tips about the upgrade process.

• Review the release notes, known issues, and system requirements for the version you are upgrading to.
• Back up your existing deployment before you perform any upgrade.
  • You can manage upgrade risk by using technology that lets you restore your installation and data to a state prior to the upgrade, whether that is external backups, disk or file system snapshots, or other means. When backing up your data, consider the $SPLUNK_HOME directory and any indexes outside of it.
• Downgrading Splunk App for Infrastructure is not supported.
• Splunk App for Infrastructure, versions 1.1.x and earlier, were not supported in search head cluster and indexer cluster environments. Upgrade and migration is not supported for distributed environments for 1.1.x and earlier versions of the app.
• If you are upgrading from version 1.2.0, remove the authorize.conf file from the $SPLUNK_HOME/etc/apps/splunk_app_infrastructure/default directory.
• If you are upgrading from version 1.2.0 or 1.2.1, remove the limits.conf file from the $SPLUNK_HOME/etc/apps/splunk_app_infrastructure/default directory.

Upgrade to new version of Splunk App for Infrastructure using the command line

1. Before you upgrade, back up all of your files.
2. Obtain a new version (package) of Splunk App for Infrastructure. Go to Splunkbase.
3. Open a shell prompt on the host that has the instance that you want to upgrade.
4. Change to the $SPLUNK_HOME/bin directory.
5. Run the $SPLUNK_HOME/bin/splunk stop command to stop the instance.
6. Confirm that no other processes can automatically start Splunk App for Infrastructure.
7. Install the package directly over your existing deployment. See Install the Splunk App for Infrastructure.
8. Run the $SPLUNK_HOME/bin/splunk start command, or go to the user interface and restart the application.