Getting Data In

What is the process of upgrading search and index cluster?

nathanpaul8
New Member

Hi All,

I need to upgrade a search and index cluster. Please advise if anything is missing and my understanding is correct.

Process:
Upgrade the master node.
Upgrade the search head tier.(Rolling upgrade)
Upgrade the peer node tier. (Rolling upgrade)

( Maintenance and rolling upgrade of each server)

When we are integrating Peer nodes( indexer nodes) we have to stop search cluster and
My expectation is it will take 1 -2 hours to finish all the indexer nodes. During that time alerts and searches may fail
and the ingestion keeps working.

Forwarders and DMC: What is the suggestion.

Thanks,

NP

0 Karma

ChrisG
Splunk Employee
Splunk Employee

It looks like you are talking about an indexer cluster, not a search head cluster? Are you following the steps in Upgrade an indexer cluster in Managing Indexers and Clusters of Indexers?

nathanpaul8
New Member

I have to upgrade both search and upgrade clusters , Forwarders, Master , DMC and license server.

0 Karma

nathanpaul8
New Member

I mean search and index clusters

0 Karma

ChrisG
Splunk Employee
Splunk Employee

For search head cluster upgrade docs, see Upgrade a search head cluster in the Distributed Search manual.

0 Karma
Get Updates on the Splunk Community!

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...

Adoption of Infrastructure Monitoring at Splunk

  Splunk's Growth Engineering team showcases one of their first Splunk product adoption-Splunk Infrastructure ...