Upgrade the universal forwarder using the remote upgrader
Chapter Describes how to install and configure the app.
From splunk.com, download the universal forwarder version 9.0.0 or later and the respective .sig file. The new .sig file is available from the More > "Download x509 Signature" link for each universal forwarder package. Once this operation completes, you will have two files:
splunkforwarder-{version}.msi
splunkforwarder-{version}.msi.sig
So for example:
splunkforwarder-9.4.0-6b4ebe426ca6-Windows-amd64.msi
splunkforwarder-9.4.0-6b4ebe426ca6-Windows-amd64.msi.sig
Copy both files into C:\ProgramData\splunk\upgrader on your destination Windows universal forwarder machine. Once you have installed the remote upgrader, the directory C:\ProgramData\splunk\upgrader is created to receive universal forwarder packages. To trigger the upgrade, run the command: copy C:\ProgramData\splunk\upgrader/start_uf_upgrade
.