Upgrade to Splunk v5

[asarolkar]

Hi Guys,

Can I upgrade my central indexer from 4.3.4 to v5.0.1 and keep my universal forwarders at version 4.3.1 ?

From a compatibility perspective, will it affect the performance of the forwarders.

Please advise if the v5.0.1 indexer is not backwards compatible with 4.3+ version of forwarders

[ChrisG]

Yes you can. Per the documentation: "All indexers are backwards compatible with any forwarder and can receive data from any earlier version forwarder. For example, a 4.2 indexer can receive data from a 4.1 forwarder." See Compatibility between forwarders and indexers in the Distributed Deployment Manual.