Splunk Upgrade sequence 8.0

[sarwshai]

What is the recommended sequence of upgrading Splunk enterprise to 8.0?
Should i upgrade all apps& add-ons first and then Splunk Enterprise or vice-versa?

Normally in 7.x.x version i'd done first enterprise and then apps-addons, however this link says different, https://docs.splunk.com/Documentation/Splunk/8.0.2/Installation/Python3LowEffort

Also evaluating some apps documents, it states for some apps you need to have Splunk 8.0 first and then upgrade the app, confused!

[richgalloway]

See https://docs.splunk.com/Documentation/Splunk/8.0.2/Installation/AboutupgradingREADTHISFIRST
Beyond that, follow the instructions you have. Upgrade apps first, unless they require Splunk 8.x; upgrade those apps after upgrading Splunk.

[gcusello]

Hi @sarwshai,
from which version are you upgrading?
if from 7.0.x (or higher) you can directly upgrade to 8, otherwise you have to pass by an intermediate version (for more details see at https://docs.splunk.com/Documentation/Splunk/8.0.2/Installation/HowtoupgradeSplunk ).

Anyway, the fist step is to check Apps compatibility: to perform this, install the "Splunk Platform Upgrade Readiness App"
( https://splunkbase.splunk.com/app/4698/ ) that gives you an overview on the compatibility of each apps to upgrade.

Then follow the instructions at https://docs.splunk.com/Documentation/Splunk/8.0.2/Installation/UpgradeonUNIX :
In few words, this is the sequence:

• Master Node
• Search Heads
• indexers
• Heavy Forwarders

For each kind of system, before Splunk and then Apps.

Remember to force the use of Python3 for each system ( https://docs.splunk.com/Documentation/Splunk/8.0.2/Installation/Python3LowEffort ).

Ciao.
Giuseppe