<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Migrate Index Cluster to New Hardware in Splunk Enterprise</title>
    <link>https://community.splunk.com/t5/Splunk-Enterprise/Migrate-Index-Cluster-to-New-Hardware/m-p/556662#M6207</link>
    <description>&lt;P&gt;&lt;STRONG&gt;Can I have an Index Cluster runnning on both RHEL 7 and RHEL 8?&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;We are looking to migrate our Splunk estate from RHEL 7 over to RHEL 8. As we have an existing Index Cluster, the plan is&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;Start - RHEL 7 Index Cluster&lt;/LI&gt;&lt;LI&gt;Build the new RHEL 8 Indexers&lt;/LI&gt;&lt;LI&gt;put the cluster into maintenance mode&lt;/LI&gt;&lt;LI&gt;add RHEL 8 indexers into the existing RHEL 7 Index Cluster&lt;/LI&gt;&lt;LI&gt;disable maintenance mode&lt;/LI&gt;&lt;LI&gt;re-balance data accros the RHEL 7 / 8 cluster&lt;/LI&gt;&lt;LI&gt;splunk offline --enforce-counts on RHEL 7 indexer(s) to be removed&lt;/LI&gt;&lt;LI&gt;End - RHEL 8 Index Cluster&lt;/LI&gt;&lt;/UL&gt;</description>
    <pubDate>Tue, 22 Jun 2021 11:12:04 GMT</pubDate>
    <dc:creator>boz_8058</dc:creator>
    <dc:date>2021-06-22T11:12:04Z</dc:date>
    <item>
      <title>Migrate Index Cluster to New Hardware</title>
      <link>https://community.splunk.com/t5/Splunk-Enterprise/Migrate-Index-Cluster-to-New-Hardware/m-p/556662#M6207</link>
      <description>&lt;P&gt;&lt;STRONG&gt;Can I have an Index Cluster runnning on both RHEL 7 and RHEL 8?&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;We are looking to migrate our Splunk estate from RHEL 7 over to RHEL 8. As we have an existing Index Cluster, the plan is&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;Start - RHEL 7 Index Cluster&lt;/LI&gt;&lt;LI&gt;Build the new RHEL 8 Indexers&lt;/LI&gt;&lt;LI&gt;put the cluster into maintenance mode&lt;/LI&gt;&lt;LI&gt;add RHEL 8 indexers into the existing RHEL 7 Index Cluster&lt;/LI&gt;&lt;LI&gt;disable maintenance mode&lt;/LI&gt;&lt;LI&gt;re-balance data accros the RHEL 7 / 8 cluster&lt;/LI&gt;&lt;LI&gt;splunk offline --enforce-counts on RHEL 7 indexer(s) to be removed&lt;/LI&gt;&lt;LI&gt;End - RHEL 8 Index Cluster&lt;/LI&gt;&lt;/UL&gt;</description>
      <pubDate>Tue, 22 Jun 2021 11:12:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Enterprise/Migrate-Index-Cluster-to-New-Hardware/m-p/556662#M6207</guid>
      <dc:creator>boz_8058</dc:creator>
      <dc:date>2021-06-22T11:12:04Z</dc:date>
    </item>
    <item>
      <title>Re: Migrate Index Cluster to New Hardware</title>
      <link>https://community.splunk.com/t5/Splunk-Enterprise/Migrate-Index-Cluster-to-New-Hardware/m-p/556674#M6209</link>
      <description>&lt;P&gt;Running RHEL7 and RHEL8 should be fine as long as both run the same version of Splunk.&lt;/P&gt;&lt;P&gt;Your steps are good with a few changes: don't bother with maintenance mode and don't waste time with rebalance.&amp;nbsp; The off-line step will rebalance the data, anyway.&amp;nbsp; Be sure to off-line one indexer at a time.&lt;/P&gt;</description>
      <pubDate>Tue, 22 Jun 2021 12:19:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Enterprise/Migrate-Index-Cluster-to-New-Hardware/m-p/556674#M6209</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2021-06-22T12:19:22Z</dc:date>
    </item>
  </channel>
</rss>

