Getting Data In

What is the process of upgrading search and index cluster?

nathanpaul8
New Member

Hi All,

I need to upgrade a search and index cluster. Please advise if anything is missing and my understanding is correct.

Process:
Upgrade the master node.
Upgrade the search head tier.(Rolling upgrade)
Upgrade the peer node tier. (Rolling upgrade)

( Maintenance and rolling upgrade of each server)

When we are integrating Peer nodes( indexer nodes) we have to stop search cluster and
My expectation is it will take 1 -2 hours to finish all the indexer nodes. During that time alerts and searches may fail
and the ingestion keeps working.

Forwarders and DMC: What is the suggestion.

Thanks,

NP

0 Karma

ChrisG
Splunk Employee
Splunk Employee

It looks like you are talking about an indexer cluster, not a search head cluster? Are you following the steps in Upgrade an indexer cluster in Managing Indexers and Clusters of Indexers?

nathanpaul8
New Member

I have to upgrade both search and upgrade clusters , Forwarders, Master , DMC and license server.

0 Karma

nathanpaul8
New Member

I mean search and index clusters

0 Karma

ChrisG
Splunk Employee
Splunk Employee

For search head cluster upgrade docs, see Upgrade a search head cluster in the Distributed Search manual.

0 Karma
Get Updates on the Splunk Community!

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

Get Inspired! We’ve Got Validation that Your Hard Work is Paying Off

We love our Splunk Community and want you to feel inspired by all your hard work! Eric Fusilero, our VP of ...