Splunk Upgrade sequence 8.0


What is the recommended sequence of upgrading Splunk enterprise to 8.0?
Should i upgrade all apps& add-ons first and then Splunk Enterprise or vice-versa?

Normally in 7.x.x version i'd done first enterprise and then apps-addons, however this link says different,

Also evaluating some apps documents, it states for some apps you need to have Splunk 8.0 first and then upgrade the app, confused!

Labels (3)
0 Karma

Re: Splunk Upgrade sequence 8.0


Hi @sarwshai,
from which version are you upgrading?
if from 7.0.x (or higher) you can directly upgrade to 8, otherwise you have to pass by an intermediate version (for more details see at ).

Anyway, the fist step is to check Apps compatibility: to perform this, install the "Splunk Platform Upgrade Readiness App"
( ) that gives you an overview on the compatibility of each apps to upgrade.

Then follow the instructions at :
In few words, this is the sequence:

  • Master Node
  • Search Heads
  • indexers
  • Heavy Forwarders

For each kind of system, before Splunk and then Apps.

Remember to force the use of Python3 for each system ( ).



Re: Splunk Upgrade sequence 8.0


Beyond that, follow the instructions you have. Upgrade apps first, unless they require Splunk 8.x; upgrade those apps after upgrading Splunk.

If this reply helps you, an upvote would be appreciated.
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.