Deployment Architecture

In a distributed and clustered environ, which kvstores need migration to wiredTiger prior to upgrading to 9.0.4?

Glasses2
Communicator

I am about to upgrade 8.1.3 distributed / clustered environment to 9.0.4.

Per Docs> 

  • Migrate your App Key Value Store storage engine from the Memory Mapped (MMAP) storage engine to the Wired Tiger storage engine, and update your MongoDB version from 3.6 to 4.2. These updates are required in Splunk Enterprise 9.0. See Migrate the KV store storage engine in the Admin manual to plan your migration.
  • Back up your App Key Value Store (KV Store) databases prior to starting an upgrade. If you run version 7.1 and lower of Splunk Enterprise, you must stop Splunk Enterprise instances first.

I am going to do this part prior to the Upgrade.

I inherited this deployment so IDK where all the KVstore(s) are located or which nodes have a default KVstore needing the same migration/upgrade (e.g. MC or DS).

My Environment> SHC(4), SHC-deployer, IDXCM, IDXC(10), MC/LM, DS, HFs, UFs

Any advice appreciated.  If someone can share knowledge such as, how to validate KVstore locations and which KVstore(s) need update...  that would help.

 

Thank you

Thank you

Tags (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Indexers and UFs never use KVStore so no upgrades are needed there.

Definitely upgrade the SHs.

I'm on the fence regarding SHCD, CM, MC/LM, and DS.  Absent advice to the contrary, I'd play it safe and upgrade them.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

0 Karma

Glasses2
Communicator

I think, better safe than sorry, looks like some apps use KVstores... 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Indexers and UFs never use KVStore so no upgrades are needed there.

Definitely upgrade the SHs.

I'm on the fence regarding SHCD, CM, MC/LM, and DS.  Absent advice to the contrary, I'd play it safe and upgrade them.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...