Installation

Splunk indexer cluster CPU upgrade

joe06031990
Communicator

Hi,

 

we have a two site 6 indexer cluster 3 per site and we are upgrading the CPU and each site will be offline for 3 hours per site, do I need to do anything on Splunk or do I need to run ./Splunk offline on 3 indexers at a time before they are shut down?

 

Thanks

Labels (1)
Tags (2)
0 Karma
1 Solution

SanjayReddy
SplunkTrust
SplunkTrust

Hi @joe06031990 

Usally what I usally follow is I will enable maintenance mode on cluster manager and 
once activity done on indexers and up and running, will disbale maintenance mode. then all bucket fixup activitys will complete.

some use maintenance mode and splunk offline together. 

View solution in original post

0 Karma

SanjayReddy
SplunkTrust
SplunkTrust

Hi @joe06031990 

Usally what I usally follow is I will enable maintenance mode on cluster manager and 
once activity done on indexers and up and running, will disbale maintenance mode. then all bucket fixup activitys will complete.

some use maintenance mode and splunk offline together. 

0 Karma

joe06031990
Communicator

Thanks, if I enable maintenance mode won’t that stop data coming in or will the indexers that are up still be receiving data?

0 Karma
Get Updates on the Splunk Community!

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud  In today’s fast-paced digital ...

Observability protocols to know about

Observability protocols define the specifications or formats for collecting, encoding, transporting, and ...

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...