Deployment Architecture

Upgrade plan and path From 7.2 to 8.0

abhic25
Explorer

I have two queries Here - 

1. I am planning to upgrade my Environment to 8.0, I am not 100% sure about my upgrade plan, can anyone confirm if this would be the correct strategy?

2. Also, I am not sure on How upgrading Heavy Forwarder. Any steps will help here.

 

Role

Current Version

Intermediate update

Target Version

Search Head, Deployment, License Mgr.

7.2.6

NA

8.0

Indexer

7.2.6

NA

8.0

Heavy Forwarder

6.5.2

7.2

8.0

Heavy Forwarder

6.5.2

7.2

8.0

Universal Forwarders

6.5.2

7.2

8.0

 

  1. Upgrade Heavy Forwarder to 7.2
  2. Upgrade UF to 7.2
  3. Upgrade all Splunk Apps.

  4. Upgrade Search Head to 8.0

  5. Upgrade Indexer to 8.0 

  6. Upgrade Heavy Forwarders to 8.0
  7. Upgrade Heavy Forwarders to 8.0 
  8. Upgrade Universal Forwarders to 8.0
Tags (1)
0 Karma
1 Solution

aasabatini
Contributor

Hi @abhic25 

 

to upgrade the HF you need to stop and reinstall the new version.

don't worry the hf buffer the info for the time you install the new version and you don't lost any data.

Please check this link for the version.

https://docs.splunk.com/Documentation/VersionCompatibility/current/Matrix/Compatibilitybetweenforwar...

and if you use SSL connection check  che certficates expiration

https://docs.splunk.com/Documentation/Splunk/8.1.3/Security/AboutsecuringyourSplunkconfigurationwith...

View solution in original post

aasabatini
Contributor

Hi @abhic25 

 

your splunk enviroment have a cluster configuration?

Because the cluster configuration needs a defined list of steps

https://docs.splunk.com/Documentation/Splunk/8.1.3/Indexer/Upgradeacluster

If your splunk enviroment is not a cluster configuration your upgrade plan should be works.

 

abhic25
Explorer

@aasabatini thanks for reply, 

Its not distributed environment. 

1 SH

1 Indexer

2 HF

Also, need to understand. how to upgrade HF.

Tags (1)
0 Karma

aasabatini
Contributor

Hi @abhic25 

 

to upgrade the HF you need to stop and reinstall the new version.

don't worry the hf buffer the info for the time you install the new version and you don't lost any data.

Please check this link for the version.

https://docs.splunk.com/Documentation/VersionCompatibility/current/Matrix/Compatibilitybetweenforwar...

and if you use SSL connection check  che certficates expiration

https://docs.splunk.com/Documentation/Splunk/8.1.3/Security/AboutsecuringyourSplunkconfigurationwith...

View solution in original post