Upgrade Splunk Enterprise from 8.x to 9.x

Amirahussein — Mon, 22 May 2023 08:44:34 GMT

We are currently required to upgrade our Splunk environment from version 8.2.4 to version 9.x, and we are concerned about any differences in Splunk SPL function functionality, as we encountered "streamstats" during our previous upgrade to version 8.2.4.

below are the components of our environment:
1- Three heavy forwarders
2- Clustering of indexers: One master machine and three indexers
3- Search Clustering: One SHC and three Search members
4- Standalone search machine
5- Two Splunk DB Connect machines
6- Deployer used to manage external universal forwarders installed on external nodes to collect real-time data.

So, if anyone encounters any major issues following the upgrade, please share them with me so that they can be taken into account, and this will be greatly appreciated.

Re: Upgrade Splunk Enterprise from 8.x to 9.x

SanjayReddy — Mon, 22 May 2023 11:01:04 GMT

Hi @Amirahussein

for upgrade from Splunk 8.x to 9.x
please refer to About upgrading to 9.0 READ THIS FIRST for ket notes and important changes.

https://docs.splunk.com/Documentation/Splunk/9.0.4/Installation/AboutupgradingREADTHISFIRST

release notes for any thing to consider before upgrade

https://docs.splunk.com/Documentation/Splunk/9.0.4/ReleaseNotes/MeetSplunk

depracted or remvoed features list similar to streamstats command

https://docs.splunk.com/Documentation/Splunk/9.0.4/ReleaseNotes/Deprecatedfeatures

Knows Issues

https://docs.splunk.com/Documentation/Splunk/9.0.4/ReleaseNotes/Knownissues

----
Regards,
Sanjay Reddy

----
If this reply helps you, Karma would be appreciated

topic Upgrade Splunk Enterprise from 8.x to 9.x in Splunk Search

Upgrade Splunk Enterprise from 8.x to 9.x

Re: Upgrade Splunk Enterprise from 8.x to 9.x