4.2 Upgrade expected duration

[Sqig]

Hi. I just did a test upgrade from 4.1 to 4.2 with indexes totaling about 350G of space.

With the notice that the data format was changing, I expected the upgrade to take quite a while. It seemed to actually occur very very quickly.

Is this expected? Should I be concerned? I'm in the process of spot-checking individual events, of course, but thought I'd get some info on what others have seen before I move into Production with this.

Thanks.

[dwaddle · Accepted solution]

The upgrade does not convert existing buckets to the new bucket structure. New hot buckets that get created with 4.2 will be created with the 4.2 structure. (The new 4.2 buckets aren't usable by older Splunk versions, btw)

My upgrade process was also very quick and smooth. No issues found.