On-Prem Splunk upgrade procedure

[EvansB]

I need help in getting the step by step process in upgrading Splunk on-prem HF

[gcusello · Accepted solution]

Hi @EvansB,

the general rule for upgrading is:

• Search Heads must have a greater version than Indexers,
• Indexers must have a greater version than connected Heavy Forwarders and Universal Forwarders,
• Heavy Forwarders must have a greater version than connected Universal Forwarders.

The Step by step procedure depends on your architecture: if you have a Search head Cluster or an Indexer Cluster, there is a prececence in activities.

Then another relevant factor is the starting version: for more infos see at https://docs.splunk.com/Documentation/Splunk/8.2.4/Installation/HowtoupgradeSplunk

For Heavy Forwarders, you have only to perform a simple upgrade, eventually backing up the installation folder.

Ciao.

Giuseppe

[isoutamo]

Hi

here is still valid process flow to update splunk

https://community.splunk.com/t5/Installation/What-s-the-order-of-operations-for-upgrading-Splunk-Ent...

r. Ismo