Splunk 7.3 to 8.2 upgrade

[Markt13]

Upgrade to Splunk 8.2 from 7.3 we must install 8.1 first before 8.2.

So is it okay to run the rpm -U for 8.1 and then 8.2 right after 8.1 finishes or should we wait until the entire 8.1 environment has been running for a few days?  Any suggestions would be greatly appreciated. 

[gcusello · Accepted solution]

Hi @Markt13,

you have to complete the upgrade to 8.1 before upgrade to 8.2, if you only run rpm and don't complete the installation you only copy the new files!

So run:

• rpm 8.1,
• run splunk start --accept-license,
• rpm 8.2,
• run splunk start --accept-license,.

Remember to perform the checks on apps before running rpm 8.1, installing the Splunk Platform Upgrade Readiness App (https://splunkbase.splunk.com/app/4698/) on Splunk 7.3 to have a situation of the apps to upgrade and configure Python3 (https://docs.splunk.com/Documentation/Splunk/8.2.1/Installation/Python3LowEffort) and follow al the steps described at https://docs.splunk.com/Documentation/Splunk/8.2.1/Installation/HowtoupgradeSplunk.

Ciao.

Giuseppe

[Markt13]

Hello @gcusello 

Thanks for the information and I have used the Splunk Platform Upgrade Readiness App.  There were no issues with any of our apps since we don't have much installed.  Again thanks for the help. 

Markt13

[gcusello]

Hi @Markt13,

good for you, tell me if I cal help you more and see next time.

Ciao and happy splunking.

Giuseppe

P.S.: Karma Points are appreciated 😉

[aasraoui]

Hi,

I'm trying to upgrade to 8.1, however when i run /opt/splunk/bin/splunk start with splunk service account (i'm getting permission denied although splunk user and group permissions are owned by splunk ??)

thanks!

[gcusello]

Hi @aasraoui,

at first don't add a new question to an existing (and solved!) on because probably none will answer you!

Anyway, let me understand:

• you have a Splunk installation with folders and files owned by splunk (maybe check if all the files are owned by splunk),
• you runned rpm or tar command to update files,
• you access to your system with splunk user,
• you runned the splunkstart command,
• you receive permission denied,

is it correct?

At first, maybe check if all the files are owned by splunk and eventually give splunk ownership to all the files (maybe you modified something as root!).

Then what user did you used to run the update?

Try with root.

What is the operative system?

Ciao.

Giuseppe