This topic provides an overview of the Splunk Remote Upgrader for Windows Universal Forwarders.

​Use the Remote Upgrader for Windows Universal Forwarders to remotely upgrade your universal forwarder for Windows. ​

​The remote upgrader is a daemon that runs alongside the universal forwarder. It monitors a directory for a new version of the universal forwarder and once it finds one there it will perform the upgrade. ​

​You install the Remote Upgrader for Windows Universal Forwarders on the same Windows instance as your universal forwarder. The Remote Upgrader for Windows Universal Forwarders then monitors for new universal forwarder packages in a predefined folder. ​

​If a new universal forwarder package is found, the Remote Upgrader for Windows Universal Forwarders upgrades the universal forwarder with that package and then ingests the upgrade detail logs from the universal forwarder to the indexers. The new universal forwarder version is delivered to the host in the form of an app which can be delivered either with the deployment server or independently. ​

​The remote upgrader must be installed by an Admin user and maintains some elevated privileges. ​