I need to upgrade a search and index cluster. Please advise if anything is missing and my understanding is correct.
Upgrade the master node.
Upgrade the search head tier.(Rolling upgrade)
Upgrade the peer node tier. (Rolling upgrade)
( Maintenance and rolling upgrade of each server)
When we are integrating Peer nodes( indexer nodes) we have to stop search cluster and
My expectation is it will take 1 -2 hours to finish all the indexer nodes. During that time alerts and searches may fail
and the ingestion keeps working.
Forwarders and DMC: What is the suggestion.