topic On-Prem Splunk upgrade procedure in Installation

On-Prem Splunk upgrade procedure

EvansB — Mon, 17 Jan 2022 12:55:37 GMT

I need help in getting the step by step process in upgrading Splunk on-prem HF

Re: On-Prem Splunk upgrade procedure

gcusello — Mon, 17 Jan 2022 13:01:58 GMT

the general rule for upgrading is:

Search Heads must have a greater version than Indexers,
Indexers must have a greater version than connected Heavy Forwarders and Universal Forwarders,
Heavy Forwarders must have a greater version than connected Universal Forwarders.

The Step by step procedure depends on your architecture: if you have a Search head Cluster or an Indexer Cluster, there is a prececence in activities.

Then another relevant factor is the starting version: for more infos see at https://docs.splunk.com/Documentation/Splunk/8.2.4/Installation/HowtoupgradeSplunk

For Heavy Forwarders, you have only to perform a simple upgrade, eventually backing up the installation folder.

Ciao.

Giuseppe

Re: On-Prem Splunk upgrade procedure

isoutamo — Mon, 17 Jan 2022 14:30:21 GMT

here is still valid process flow to update splunk

https://community.splunk.com/t5/Installation/What-s-the-order-of-operations-for-upgrading-Splunk-Enterprise/td-p/408003

r. Ismo