Installation

On-Prem Splunk upgrade procedure

EvansB
Explorer

I need help in getting the step by step process in upgrading Splunk on-prem HF

Labels (1)
Tags (2)
0 Karma
1 Solution

gcusello
Legend

Hi @EvansB,

the general rule for upgrading is:

  • Search Heads must have a greater version than Indexers,
  • Indexers must have a greater version than connected Heavy Forwarders and Universal Forwarders,
  • Heavy Forwarders must have a greater version than connected Universal Forwarders.

The Step by step procedure depends on your architecture: if you have a Search head Cluster or an Indexer Cluster, there is a prececence in activities.

Then another relevant factor is the starting version: for more infos see at https://docs.splunk.com/Documentation/Splunk/8.2.4/Installation/HowtoupgradeSplunk

For Heavy Forwarders, you have only to perform a simple upgrade, eventually backing up the installation folder.

Ciao.

Giuseppe

View solution in original post

gcusello
Legend

Hi @EvansB,

the general rule for upgrading is:

  • Search Heads must have a greater version than Indexers,
  • Indexers must have a greater version than connected Heavy Forwarders and Universal Forwarders,
  • Heavy Forwarders must have a greater version than connected Universal Forwarders.

The Step by step procedure depends on your architecture: if you have a Search head Cluster or an Indexer Cluster, there is a prececence in activities.

Then another relevant factor is the starting version: for more infos see at https://docs.splunk.com/Documentation/Splunk/8.2.4/Installation/HowtoupgradeSplunk

For Heavy Forwarders, you have only to perform a simple upgrade, eventually backing up the installation folder.

Ciao.

Giuseppe

isoutamo
SplunkTrust
SplunkTrust
Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...