Upgrading the TA-nmon-hec is nothing more than reproducing the initial installation steps, basically uncompressing the content of the TA-nmon tgz archive.

Please refer to the installation documentations:

$SPLUNK_HOME/etc/apps/TA-nmon-hec/bin  To: $SPLUNK_HOME/var/log/nmon/bin