topic Enterprise Upgrade Path in Splunk Enterprise Security

Enterprise Upgrade Path

joonoyang — Thu, 22 Feb 2018 15:22:38 GMT

Hi Splunk forks,

I would like to make sure if the following upgrade path is okay. We have ES 4.5.1 running on Splunk Enterprise 6.5.1 and the below is what I’m thinking.
First, Upgrade to ES 4.7.4
Second. Upgrade to Splunk 7.0
Third. Upgrade to ES 5.0

Thanks in advance.
Joon

Re: Enterprise Upgrade Path

mdessus_splunk — Thu, 22 Feb 2018 17:54:46 GMT

Hi Joon,

you should be able to upgrade Spluk core to 7.0 and then upgrade ES directly to 5.0 ( http://docs.splunk.com/Documentation/ES/5.0.0/Install/Beforeupgrading ).

Regards

Re: Enterprise Upgrade Path

smoir_splunk — Thu, 22 Feb 2018 18:06:24 GMT

Joon, your proposed upgrade path looks great. If you can do it all in one maintenance window, what @mdessus suggests should work. If you need to do it progressively over several maintenance windows, follow the steps you outline in your question.