Shuold I upgrade my universal forwarders when after I upgrade my HF?

[christianubeda]

Hi team!

Shuold I upgrade my universal forwarders when after I upgrade my HF?

Data > UF > HF > Indexer

Right now all is in 6.5.2 version. Indexer and HF will be in 7.3.4 soon.

Thanks!

Salut

[gcusello · Accepted solution]

Hi @christianubeda,
it's always a good approach to have the most recent version of UFs, but they must have the same or earlier version than HFs and Indexers.
So, if you can, use the same version of Indexer and HF and avoid to use 6 version.
At the same time I suggest to think to upgrade to latest Splunk version (8).

If your question is related to the sequence of upgrade: the rule is that Indexer and HF must have the same or highr version than UFs, so upgrade before Indexers, then HFs and then UFs.

Ciao.
Giuseppe