topic Error during Splunk forwarder upgrade from 7.2.0 to 8.1.0 in Getting Data In

Error during Splunk forwarder upgrade from 7.2.0 to 8.1.0

ramshan — Thu, 24 Dec 2020 13:09:58 GMT

Getting below error after executing below command

./splunk start --accept-license --answer-yes

It seems that the Splunk default certificates are being used. If certificate validation is turned on using the default certificates (not-recommended), this may result in loss of communication in mixed-version Splunk environments after upgrade.

"/base_app/splunk/splunkforwarder/etc/auth/ca.pem": already a renewed Splunk certificate: skipping renewal
"/base_app/splunk/splunkforwarder/etc/auth/cacert.pem": already a renewed Splunk certificate: skipping renewal
ERROR: Valid migration mode not specified.
ERROR while running migrate-distsearch-conf migration.

Error during Splunk forwarder upgrade from 7.2.0 to 8.1.0

dsanders80 — Tue, 28 Sep 2021 19:34:59 GMT

Did anyone ever offer any answer to this issue. I am running into the same problem.

Re: Error during Splunk forwarder upgrade from 7.2.0 to 8.1.0

amanve — Mon, 17 Feb 2025 18:38:35 GMT

It's been a long time. But did any one got any answers. I am stuck with same issue on aix machine. Trying to upgrade my forwarder from 8.2.3 to 9.2.3 version