IT Operations Discussions
All the up-time. All the nines.

Splunk not working after migrating splunk Version 6.5.3 to AWS instance with splunk Version 8.0.5

sree007
Explorer

Hello,

I am trying to migrate the splunk from a physical machine to AWS, the version running on the physical machine is 6.5.3 and one on the AWS is 8.0.5, i have rsync the splunk home but it didnt work. Can you  suggest me the best way i can have all the data up and running on the latest splunk in AWS.

Thanks

Sreejith

Tags (2)
0 Karma

sree007
Explorer

Thank you it worked by step by step upgrade

0 Karma

sree007
Explorer

Just want to clear that i am able to telnet the 8000 port within the splunk machine but not accessible from my browser. Also i have my splund.log have entries

09-12-2020 12:34:20.444 +0000 ERROR AggregatorMiningProcessor - Expected boolean value for setting "ADD_EXTRA_TIME_FIELDS", instead got:  ...defaulting to true.

Is this something i have to be worried about

0 Karma

isoutamo
SplunkTrust
SplunkTrust
What your migration.log to 7.1 said and are there anything else in your splunkd.log?
r. Ismo
0 Karma

isoutamo
SplunkTrust
SplunkTrust
Hi
In document https://docs.splunk.com/Documentation/Splunk/8.0.6/Installation/AboutupgradingREADTHISFIRST it’s said that you must be first in version 7.x. So check first can you migrate from 6.5.3 to 7 or must you go through 6.6 or can you go directly 7.x. After that you can update it to 8.x.
r. Ismo

sree007
Explorer

Hello,

 

Thank you  for the reply.

As you suggested also from the splunk doc https://docs.splunk.com/Documentation/Splunk/8.0.5/Installation/HowtoupgradeSplunk , i have tried upgrading step by step. I couldnt find any download link for the version 7.0, so upgraded the current version 6.5.3 to 7.1  which is available in the splunk download link https://www.splunk.com/en_us/download/previous-releases.html#tabs/linux. But after when i start my splunk from command line but the web portal is still not up, but i can telent the 8000 port. Let me know if i have missed anything from my side.

Thanks

Sreejith

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...