Getting Data In

Can you simply delete the 6.4.3 forwarder and installing the 7.2.1 forwarder?

Builder

Hi. We are running Splunk Enterprise 6.4.3, and our Universal Forwarders are running the same version. We'll be upgrading to Splunk Enterprise to 7.2.1, which I understand involves a hop to 6.5, then an upgrade to 7.1.x.

We want to upgrade our Universal Forwarders as well. Does upgrading the forwarders from 6.4.3 -> 7.1.x also require the extra hop? Or can they go from straight from 6.4.3 to 7.2.1?

Thanks!

0 Karma
1 Solution

Contributor

according to the documentation yes, upgrade your forwarders to 6.5 first.

From version 6.5 or later to 7.1 on Splunk universal forwarders.

http://docs.splunk.com/Documentation/Splunk/7.1.1/Installation/AboutupgradingREADTHISFIRST

View solution in original post

Contributor

according to the documentation yes, upgrade your forwarders to 6.5 first.

From version 6.5 or later to 7.1 on Splunk universal forwarders.

http://docs.splunk.com/Documentation/Splunk/7.1.1/Installation/AboutupgradingREADTHISFIRST

View solution in original post

Builder

Glossed right over that line. Thanks. 🙂

0 Karma