Splunk Enterprise upgrade to Splunk Enterprise 8.0

cyberportnoc — Wed, 01 Apr 2020 01:33:10 GMT

Currently we are running Splunk Enterprise 6.5.3 and want to upgrade to 8.0. The server OS is Ubuntu 14.04.1 LTS.
How about I export the database and configuration, install 8.0 on a new server and then import those data? Is it possible?

Re: Splunk Enterprise upgrade to Splunk Enterprise 8.0

gcusello — Wed, 30 Sep 2020 04:48:07 GMT

Hi @cyberportnoc,
you want to install move your Splunk instance on a new server and upgrade it, is it correct?
If this is your need, I'd follow these steps:

install Splunk 6.5.3 on the new server, possibly using the same hostname;
copy the etc folder from the old to the new instance;
restart Splunk;
if you cannot use the same hostname, you have to rename the hostname in $SPLUNK_HOME/etc/system/local/server.conf and $SPLUNK_HOME/etc/system/local/inputs.conf and then restart Splun;
upgrade Splunk to an intermediate version (e.g. 7.0.x) (for more infos see at https://docs.splunk.com/Documentation/Splunk/8.0.2/Installation/HowtoupgradeSplunk );
install the app Splunk Platform Upgrade Readiness App ( https://splunkbase.splunk.com/app/4698/ ) and check the status of your apps;
upgrade Splunk to the latest version (today 8.0.2.1) following instructions at https://docs.splunk.com/Documentation/Splunk/8.0.2/Installation/UpgradeonUNIX ;
upgrade Apps;
upgrade Python to 3 following instructions at https://docs.splunk.com/Documentation/Splunk/8.0.2/Installation/PlanPython3 .

Ciao.
Giuseppe

topic Splunk Enterprise upgrade to Splunk Enterprise 8.0 in Splunk Enterprise

Splunk Enterprise upgrade to Splunk Enterprise 8.0

Re: Splunk Enterprise upgrade to Splunk Enterprise 8.0