topic Re: Compatibility between forwarders and indexers in Deployment Architecture

Compatibility between forwarders and indexers

AaronMoorcroft — Mon, 20 Apr 2015 09:53:35 GMT

Hi Guys,

I could do with upgrading all our forwarders, mainly 5.0.2 on Windows to the latest forwarder build 6.2.2, the potential issue being that our indexer is 5.0.2. This will be upgraded also but not for a while, so my question is if I go ahead and upgrade the current forwarders from 5.0.2 up to 6.2.2 will they continue to work with a 5.0.2 Indexer ?

Thank you

Re: Compatibility between forwarders and indexers

MuS — Mon, 20 Apr 2015 09:58:53 GMT

Hi AaronMoorcroft,

check the docs http://docs.splunk.com/Documentation/Splunk/6.2.2/Forwarding/Compatibilitybetweenforwardersandindexers where you can find the following statement:

 6.x forwarders (universal/light/heavy) are backwards compatible down to 5.0.x indexers.

Hope that helps ...

cheers, MuS

Re: Compatibility between forwarders and indexers

jeffland — Mon, 20 Apr 2015 09:59:41 GMT

It shouldn't be a problem to use 6.x forwarders with 5.x indexers, based on this documentation.

Re: Compatibility between forwarders and indexers

jeffland — Mon, 20 Apr 2015 10:01:24 GMT

Meh, you were seconds faster... 🙂

Re: Compatibility between forwarders and indexers

AaronMoorcroft — Mon, 20 Apr 2015 10:07:09 GMT

That's spot on, thank you very much for that, now I guess I have some work to do :$

Re: Compatibility between forwarders and indexers

AaronMoorcroft — Mon, 20 Apr 2015 10:08:01 GMT

cheers pal 🙂