topic Re: Upgrading Universal Forwarder from 5.0.2 to 6.5.4 in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Upgrading-Universal-Forwarder-from-5-0-2-to-6-5-4/m-p/318325#M59487 <P>hello there,<BR /> question 1<BR /> per this doc:<BR /> <A href="http://docs.splunk.com/Documentation/Forwarder/6.6.2/Forwarder/Upgradethenixuniversalforwarder">http://docs.splunk.com/Documentation/Forwarder/6.6.2/Forwarder/Upgradethenixuniversalforwarder</A><BR /> which leads you to this doc:<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.6.2/Installation/HowtoupgradeSplunk">http://docs.splunk.com/Documentation/Splunk/6.6.2/Installation/HowtoupgradeSplunk</A><BR /> upgrading from version 5.0 to 6.x is not supported.<BR /> it also says to upgrade to 6.3 first and then move on to desired version.<BR /> question 2<BR /> upgrade the Search Head first then the indexer and lastly the forwarders<BR /> hope it helps</P> Tue, 18 Jul 2017 12:06:08 GMT adonio 2017-07-18T12:06:08Z Upgrading Universal Forwarder from 5.0.2 to 6.5.4 https://community.splunk.com/t5/Getting-Data-In/Upgrading-Universal-Forwarder-from-5-0-2-to-6-5-4/m-p/318324#M59486 <P>Hello Splunk Experts,</P> <P>Recently, I've been tasked to upgrade a distributed Splunk environment with the condition as follows:</P> <UL> <LI>Search Head &amp; Indexer version: 6.1.3</LI> <LI>Universal Forwarder version: 5.0.2</LI> </UL> <P>There are 2 things in which I need confirmation of:</P> <OL> <LI>Is it possible to perform upgrade directly from 5.0.2 to 6.5.4 for UF?</LI> <LI>Could I upgrade UF first before upgrading SH and then IDX?</LI> </OL> <P>Thank you and please advise.</P> Tue, 18 Jul 2017 10:15:28 GMT https://community.splunk.com/t5/Getting-Data-In/Upgrading-Universal-Forwarder-from-5-0-2-to-6-5-4/m-p/318324#M59486 vincenteous 2017-07-18T10:15:28Z Re: Upgrading Universal Forwarder from 5.0.2 to 6.5.4 https://community.splunk.com/t5/Getting-Data-In/Upgrading-Universal-Forwarder-from-5-0-2-to-6-5-4/m-p/318325#M59487 <P>hello there,<BR /> question 1<BR /> per this doc:<BR /> <A href="http://docs.splunk.com/Documentation/Forwarder/6.6.2/Forwarder/Upgradethenixuniversalforwarder">http://docs.splunk.com/Documentation/Forwarder/6.6.2/Forwarder/Upgradethenixuniversalforwarder</A><BR /> which leads you to this doc:<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.6.2/Installation/HowtoupgradeSplunk">http://docs.splunk.com/Documentation/Splunk/6.6.2/Installation/HowtoupgradeSplunk</A><BR /> upgrading from version 5.0 to 6.x is not supported.<BR /> it also says to upgrade to 6.3 first and then move on to desired version.<BR /> question 2<BR /> upgrade the Search Head first then the indexer and lastly the forwarders<BR /> hope it helps</P> Tue, 18 Jul 2017 12:06:08 GMT https://community.splunk.com/t5/Getting-Data-In/Upgrading-Universal-Forwarder-from-5-0-2-to-6-5-4/m-p/318325#M59487 adonio 2017-07-18T12:06:08Z Re: Upgrading Universal Forwarder from 5.0.2 to 6.5.4 https://community.splunk.com/t5/Getting-Data-In/Upgrading-Universal-Forwarder-from-5-0-2-to-6-5-4/m-p/318326#M59488 <P>Hello adonio,</P> <P>Thank you for the documentation. I read the doc and I found another link about upgrading there:</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/6.6.2/Installation/Aboutupgradingto6.6READTHISFIRST">http://docs.splunk.com/Documentation/Splunk/6.6.2/Installation/Aboutupgradingto6.6READTHISFIRST</A></P> <P>That doc also mentions about upgrade path, but it seems that you can directly upgrade UF from 5.x to 6.x (in my case to 6.5.4). Now I'm confused on what to follow. Is it possible that upgrading to 6.3 first only mandatory for Splunk Enterprise?</P> Thu, 20 Jul 2017 17:51:08 GMT https://community.splunk.com/t5/Getting-Data-In/Upgrading-Universal-Forwarder-from-5-0-2-to-6-5-4/m-p/318326#M59488 vincenteous 2017-07-20T17:51:08Z Re: Upgrading Universal Forwarder from 5.0.2 to 6.5.4 https://community.splunk.com/t5/Getting-Data-In/Upgrading-Universal-Forwarder-from-5-0-2-to-6-5-4/m-p/318327#M59489 <P>interesting, <BR /> i guess you can go either way as its not supported.<BR /> better try to go to 6.3 first<BR /> cheers</P> Thu, 20 Jul 2017 18:00:11 GMT https://community.splunk.com/t5/Getting-Data-In/Upgrading-Universal-Forwarder-from-5-0-2-to-6-5-4/m-p/318327#M59489 adonio 2017-07-20T18:00:11Z Re: Upgrading Universal Forwarder from 5.0.2 to 6.5.4 https://community.splunk.com/t5/Getting-Data-In/Upgrading-Universal-Forwarder-from-5-0-2-to-6-5-4/m-p/318328#M59490 <P>All right. Thank you for your insight.<BR /> I guess I will try to request a development environment to test things out.</P> Sat, 22 Jul 2017 11:24:28 GMT https://community.splunk.com/t5/Getting-Data-In/Upgrading-Universal-Forwarder-from-5-0-2-to-6-5-4/m-p/318328#M59490 vincenteous 2017-07-22T11:24:28Z