Upgrade the universal forwarder using the remote upgrader

Chapter Describes how to install and configure the app.

From ​splunk.com​, download the universal forwarder version 9.0.0 or later and the respective .sig file. The new .sig file is available from the More​ > "Download x509 Signature" link for each universal forwarder package. Once this operation completes, you will have two files:

  • ​splunkforwarder-{version}.msi

  • ​splunkforwarder-{version}.msi.sig​

​So for example: ​

  • ​splunkforwarder-9.4.0-6b4ebe426ca6-Windows-amd64.msi​

  • ​splunkforwarder-9.4.0-6b4ebe426ca6-Windows-amd64.msi.sig​

Copy both files into C:\ProgramData\splunk\upgrader on your destination Windows universal forwarder machine. Once you have installed the remote upgrader, the directory C:\ProgramData\splunk\upgrader is created to receive universal forwarder packages.​ ​To trigger the upgrade, run the command: copy C:\ProgramData\splunk\upgrader/start_uf_upgrade​ .