Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Installation
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- Splunk Administration
- :
- Admin Other
- :
- Installation
- :
- How to upgrade the one indexer in indexer cluster
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Mayanakhan
Explorer
08-21-2019
05:54 AM
Hi,
Recently we have upgraded the splunk indexer cluster to 7.2.6 but our team is miss to upgrade one indexer node. Can anyone help with the process of upgrading the single indexer node in a cluster from 7.0.4 to 7.2.6.
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
somesoni2
Revered Legend
08-21-2019
06:35 AM
Follow instruction of step 3 - Upgrade the peer node tier on that indexer node.
So basically,
- Run splunk enable maintenance-mode on the master. To confirm that the master is in maintenance mode, run splunk show maintenance-mode on the master. This step prevents unnecessary bucket fix-ups.
- Stop Splunk on the peer nodes. When bringing down the peer, use the splunk stop command, not splunk offline.
- Upgrade the peer nodes, following the normal procedure for any Splunk Enterprise upgrade.
- Start the peer nodes, if they are not already running.
- Run splunk disable maintenance-mode on the master.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
somesoni2
Revered Legend
08-21-2019
06:35 AM
Follow instruction of step 3 - Upgrade the peer node tier on that indexer node.
So basically,
- Run splunk enable maintenance-mode on the master. To confirm that the master is in maintenance mode, run splunk show maintenance-mode on the master. This step prevents unnecessary bucket fix-ups.
- Stop Splunk on the peer nodes. When bringing down the peer, use the splunk stop command, not splunk offline.
- Upgrade the peer nodes, following the normal procedure for any Splunk Enterprise upgrade.
- Start the peer nodes, if they are not already running.
- Run splunk disable maintenance-mode on the master.
Get Updates on the Splunk Community!
Splunk Search APIを使えば調査過程が残せます
このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。
Note: This article is published in both Japanese ...
Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...
Splunk is More Than Just the Web Console
For Digital Forensics and Incident Response (DFIR) practitioners, ...
Congratulations to the 2025-2026 SplunkTrust!
Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!
The ...
