Deployment Architecture

Indexer cluster: same operating system, but with different versions?

mas
Path Finder

Hi all,

according to official documentation, all indexer cluster nodes (master node, peer nodes, and search heads) must run on the same operating system (official documentation). It's not clear to me if this mean the same operating system type (e.g. SLES) or the same operating system type in the same version (e.g. SLES v12.3).

We are going to "upgrade" the cluster master and some search heads to a newer operating system version, creating new machines that will substitute the existing ones. We would like to move from SLES v11.4 to SLES v15.1, but indexers are running on SLES v12.3.

Mixing SLES v.12.3 (on indexers) and SLES v.15.1 (on cluster master and search head) could cause issues? In any case, we would install the same Splunk version on all cluster nodes.

Labels (1)

AhmedAYounis
Engager

Hello Mas, 
Could you please Mention whether you faced any problems or if there were any issues after the upgrade?   

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

as long you are using enough close versions that should work. This enables you to upgrade OS to the newer versions. But to avoid additional weird issues, I suggest that you could upgrade those to the same major, minor and patch levels as soon as possible.

r. Ismo

Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...