topic Can you help us with our issue involving a Splunk Universal Forwarder Upgrade? in Getting Data In

Can you help us with our issue involving a Splunk Universal Forwarder Upgrade?

anandhalagarasa — Thu, 15 Nov 2018 08:04:22 GMT

Our Splunk Enterprise Systems ( Cluster Master, Indexers, Search Head and Heavy Forwarders .Deployment Master ) are running with Splunk 7.0.7 version.

So, we are planning to upgrade our Splunk Universal Forwarders for both the OS (Windows & Linux) from 6.5.0 to 7.0.7.

So my question is: can we directly upgrade our Splunk Universal Forwarders from 6.5.0 to 7.0.7 or do we need to upgrade something like from 6.5.0 to 7.0.0 and then to 7.0.7?

Kindly share your thoughts on the issue.

Re: Can you help us with our issue involving a Splunk Universal Forwarder Upgrade?

echalex — Thu, 15 Nov 2018 08:51:19 GMT

Hello anandhalagarasan ,

Going directly to 7.0.7 should not be a problem. The extra steps are usually only needed to upgrade between major releases. (And I think it's less of an issue with the Universal Forwarder, than it is with the full version.) For example, Splunk Enterprise below 6.5 needs to be upgraded to 6.5.x before upgrading to 7.x, but 6.5.9 is fine and you wouldn't need to go through 6.5.0.

So in your case, upgrading directly to 7.0.7 is fine.

Re: Can you help us with our issue involving a Splunk Universal Forwarder Upgrade?

anandhalagarasa — Thu, 15 Nov 2018 10:00:52 GMT

Thank you for your prompt response. Much appreciated.