topic Re: Splunk Rollback in Deployment Architecture https://community.splunk.com/t5/Deployment-Architecture/Splunk-Rollback/m-p/523760#M18031 You could found couple of cases how this can do on single instance by just googling with “splunk rollback update” those expects that there haven’t been any changes to indexes e.g. change of compression method etc.<BR />r. Ismo Thu, 08 Oct 2020 17:05:54 GMT isoutamo 2020-10-08T17:05:54Z Splunk Rollback https://community.splunk.com/t5/Deployment-Architecture/Splunk-Rollback/m-p/523751#M18028 <P>Is it possible to rollback changes if we face some issue upon Splunk enterprise version upgrade?</P> Thu, 08 Oct 2020 16:47:03 GMT https://community.splunk.com/t5/Deployment-Architecture/Splunk-Rollback/m-p/523751#M18028 sanjubaba 2020-10-08T16:47:03Z Re: Splunk Rollback https://community.splunk.com/t5/Deployment-Architecture/Splunk-Rollback/m-p/523753#M18029 <P>It depends what kind of environment you have and which kind of update you have done. Quite often the answer is no or use your backups to restore to the previous version. That also needs that you have stopped your input for update time, otherwise you lost those events when you do a restore from backups.</P><P>r. Ismo</P> Thu, 08 Oct 2020 16:51:13 GMT https://community.splunk.com/t5/Deployment-Architecture/Splunk-Rollback/m-p/523753#M18029 isoutamo 2020-10-08T16:51:13Z Re: Splunk Rollback https://community.splunk.com/t5/Deployment-Architecture/Splunk-Rollback/m-p/523754#M18030 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/214410">@isoutamo</a>&nbsp;Thank you for your reply.</P><P>Can you provide any document link or community discussion link regarding this topic?</P> Thu, 08 Oct 2020 16:54:51 GMT https://community.splunk.com/t5/Deployment-Architecture/Splunk-Rollback/m-p/523754#M18030 sanjubaba 2020-10-08T16:54:51Z Re: Splunk Rollback https://community.splunk.com/t5/Deployment-Architecture/Splunk-Rollback/m-p/523760#M18031 You could found couple of cases how this can do on single instance by just googling with “splunk rollback update” those expects that there haven’t been any changes to indexes e.g. change of compression method etc.<BR />r. Ismo Thu, 08 Oct 2020 17:05:54 GMT https://community.splunk.com/t5/Deployment-Architecture/Splunk-Rollback/m-p/523760#M18031 isoutamo 2020-10-08T17:05:54Z