Upgrade to a new version of Splunk App for Infrastructure
To complete this task, you must be an administrator familiar with clustered environments on Splunk Enterprise.
When you upgrade to a new version of SAI, install the new package directly over your existing deployment in Splunk Enterprise. Integration with Splunk IT Service Intelligence (ITSI) is enabled by default. If you're upgrading ITSI while SAI is already installed in your environment, the SAI version is automatically upgraded to the most recent version.
Before you upgrade
Learn important information and tips about the upgrade process.
- If you're monitoring metrics for Windows systems, update Windows Performance Monitor (perfmon) stanzas in
inputs.conffor the Splunk Add-on for Infrastructure and each universal forwarder on a Windows system. Version 1.4.0 introduced new perfmon stanzas that migrate perfmon inputs from a log-based format to a metrics-based format. If you're upgrading from a version earlier than version 1.4.0, you have to update
inputs.confon every universal forwarder and
props.confon every indexer. You won't receive perfmon data from Windows systems you're monitoring until you update
props.conf. For more information about updating perfmon stanzas, see Upgrade to a new version of Splunk App for Infrastructure that's monitoring Windows systems.
- If you're upgrading from version 1.2.0 or 1.2.1, remove the
limits.conffile from the
- Review the release notes, known issues, and system requirements for the version you are upgrading to.
- Back up your existing deployment before you perform any upgrade.
- You can manage upgrade risk by using technology that lets you restore your installation and data to a state prior to the upgrade, whether that is external backups, disk or file system snapshots, or other means. When backing up your data, consider the $SPLUNK_HOME directory and any indexes outside of it.
- Downgrading SAI isn't supported.
Upgrade to new version of SAI
- Before you upgrade, back up all of your files.
- Obtain a new version of SAI. Go to Splunkbase.
- Open a shell prompt on the host that has the instance that you want to upgrade.
- Change to the
- Run the
$SPLUNK_HOME/bin/splunk stopcommand to stop the instance.
- Confirm that no other processes can automatically start SAI.
- Install the package directly over your existing deployment. See Install the Splunk App for Infrastructure.
- Run the
$SPLUNK_HOME/bin/splunk startcommand, or go to the user interface and restart the application.
Install the Splunk App for Infrastructure in a Splunk Cloud deployment
Upgrade to a new version of Splunk App for Infrastructure that's monitoring Windows systems
This documentation applies to the following versions of Splunk® App for Infrastructure (Legacy): 2.2.0 Cloud only, 2.2.1, 2.2.3 Cloud only, 2.2.4, 2.2.5