Upgrade queries v8 with deployment server and cluster environment


Splunk Enterprise version 7.1.0 and higher supports rolling upgrade so steps would be. 

  1. Upgrade the master node/Cluster master 
  2. Perform a rolling upgrade of a search head cluster 
  3. Perform a rolling upgrade of an indexer cluster 
  4. Upgrade heavy forwarder and Universal forwarder 

But when do we upgrade Deployment server before or after upgrade? 

any recommendation for kvstore and app kv store.

Please share any challenges I might face during upgrade or any tips. 



Labels (3)
0 Karma



You can upgrade Deployment Server, Heavy Forwarders after LM, CM, IDXC, SHC upgrade. I'll highly recommend you to take KVStore backup before upgrade.

Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...