Has anyone upgraded from a 6.0.X distributed search environment with search head pooling to 6.2.X with search head clustering?

[ben_leung]

Has anyone experienced upgrading from a distributed search environment with search head pooling to the new version 6.2 with search head clustering? Tips and pointers would be appreciated.

[Steve_G_]

See: http://docs.splunk.com/Documentation/Splunk/6.2.1/DistSearch/Migratefromsearchheadpooling

[wsnyder2]

Hello, I am in the same boat. Just upgraded our search heads from 6.1.4 to 6.2.2 and want to change from SHPool to SHCluster. The Splunk docs regarding migration are vague. It sounds like new splunk instances are required (?) and you migrate configs/app ... Can these be on the same host? or do I need new hosts? Help : - )

[ben_leung]

Was told by Splunk support that we need new instances for SHC. It can be on the same host when migrating the files. Have you set up a deployer instance to push apps? We had a lengthy discussions where the deployer was not actually required, but removing it would lead to a lot of responsibilities in managing apps in the SHC.

There are many points to consider while there is a lack of documentation that is very specific/technical from my perspective.

If I were you, I would revert back to 6.1.4, then have new 6.2.2 instances installed and then migrate the needed files.

@Splunk Inc. please have some support for migration/upgrade for pooling to clustering. It would greatly be beneficial to all customers.

[martin_mueller]

Do note, according to http://docs.splunk.com/Documentation/Splunk/6.2.1/Installation/Aboutupgradingto6.2READTHISFIRST there is no migration path from SHP to SHC directly.