Installation

Upgrade queries v8 with deployment server and cluster environment

samcyber20
Explorer

Splunk Enterprise version 7.1.0 and higher supports rolling upgrade so steps would be. 

  1. Upgrade the master node/Cluster master 
  2. Perform a rolling upgrade of a search head cluster 
  3. Perform a rolling upgrade of an indexer cluster 
  4. Upgrade heavy forwarder and Universal forwarder 

But when do we upgrade Deployment server before or after upgrade? 

any recommendation for kvstore and app kv store.

Please share any challenges I might face during upgrade or any tips. 

ta 

 

Labels (3)
0 Karma

harsmarvania57
Ultra Champion

Hi,

You can upgrade Deployment Server, Heavy Forwarders after LM, CM, IDXC, SHC upgrade. I'll highly recommend you to take KVStore backup before upgrade.

Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...