Upgrade the Universal Forwarder Helm chart

Upgrade the Universal Forwarder Helm chart release with updated values or a new image version.

1. Upgrade the release, passing all the values you want to keep.
   CODECopy

   helm upgrade my-uf ./helm-chart/splunk-universalforwarder \ --namespace my-namespace \ --set splunkConfig.forwardServer=indexer.example.com:9997 \ --set splunkConfig.password=MySecurePassword1 \ --set splunkConfig.splunkGeneralTerms=<value-from-splunk-general-terms-acceptance-page>

   helm upgrade my-uf ./helm-chart/splunk-universalforwarder \
     --namespace my-namespace \
     --set splunkConfig.forwardServer=indexer.example.com:9997 \
     --set splunkConfig.password=MySecurePassword1 \
     --set splunkConfig.splunkGeneralTerms=<value-from-splunk-general-terms-acceptance-page>

   Note: helm upgrade does not preserve previously used --set values unless you use --reuse-values, which is not recommended; use a values file instead.
2. For production, use a values file instead of repeated --set flags.
   CODECopy

   # Create values-production.yaml with all your overrides helm upgrade my-uf ./helm-chart/splunk-universalforwarder \ --namespace my-namespace \ --values values-production.yaml

   # Create values-production.yaml with all your overrides
   helm upgrade my-uf ./helm-chart/splunk-universalforwarder \
     --namespace my-namespace \
     --values values-production.yaml

3. To upgrade the image version, add the image.tag override.
   CODECopy

   helm upgrade my-uf ./helm-chart/splunk-universalforwarder \ --namespace my-namespace \ --values values-production.yaml \ --set image.tag=10.4.1

   helm upgrade my-uf ./helm-chart/splunk-universalforwarder \
     --namespace my-namespace \
     --values values-production.yaml \
     --set image.tag=10.4.1

   The PVCs are reused. Splunk detects the existing splunk.secret and skips a full reinitialization.

helm history my-uf --namespace my-namespace

helm rollback my-uf <revision> --namespace my-namespace