Getting Data In

What is the process of upgrading search and index cluster?

nathanpaul8
New Member

Hi All,

I need to upgrade a search and index cluster. Please advise if anything is missing and my understanding is correct.

Process:
Upgrade the master node.
Upgrade the search head tier.(Rolling upgrade)
Upgrade the peer node tier. (Rolling upgrade)

( Maintenance and rolling upgrade of each server)

When we are integrating Peer nodes( indexer nodes) we have to stop search cluster and
My expectation is it will take 1 -2 hours to finish all the indexer nodes. During that time alerts and searches may fail
and the ingestion keeps working.

Forwarders and DMC: What is the suggestion.

Thanks,

NP

0 Karma

ChrisG
Splunk Employee
Splunk Employee

It looks like you are talking about an indexer cluster, not a search head cluster? Are you following the steps in Upgrade an indexer cluster in Managing Indexers and Clusters of Indexers?

nathanpaul8
New Member

I have to upgrade both search and upgrade clusters , Forwarders, Master , DMC and license server.

0 Karma

nathanpaul8
New Member

I mean search and index clusters

0 Karma

ChrisG
Splunk Employee
Splunk Employee

For search head cluster upgrade docs, see Upgrade a search head cluster in the Distributed Search manual.

0 Karma
Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...