Getting Data In

What is the process of upgrading search and index cluster?

nathanpaul8
New Member

Hi All,

I need to upgrade a search and index cluster. Please advise if anything is missing and my understanding is correct.

Process:
Upgrade the master node.
Upgrade the search head tier.(Rolling upgrade)
Upgrade the peer node tier. (Rolling upgrade)

( Maintenance and rolling upgrade of each server)

When we are integrating Peer nodes( indexer nodes) we have to stop search cluster and
My expectation is it will take 1 -2 hours to finish all the indexer nodes. During that time alerts and searches may fail
and the ingestion keeps working.

Forwarders and DMC: What is the suggestion.

Thanks,

NP

0 Karma

ChrisG
Splunk Employee
Splunk Employee

It looks like you are talking about an indexer cluster, not a search head cluster? Are you following the steps in Upgrade an indexer cluster in Managing Indexers and Clusters of Indexers?

nathanpaul8
New Member

I have to upgrade both search and upgrade clusters , Forwarders, Master , DMC and license server.

0 Karma

nathanpaul8
New Member

I mean search and index clusters

0 Karma

ChrisG
Splunk Employee
Splunk Employee

For search head cluster upgrade docs, see Upgrade a search head cluster in the Distributed Search manual.

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...