Upgrade queries v8 with deployment server and cluster environment

[samcyber20]

Splunk Enterprise version 7.1.0 and higher supports rolling upgrade so steps would be. 

1. Upgrade the master node/Cluster master 
2. Perform a rolling upgrade of a search head cluster 
3. Perform a rolling upgrade of an indexer cluster 
4. Upgrade heavy forwarder and Universal forwarder 

But when do we upgrade Deployment server before or after upgrade? 

any recommendation for kvstore and app kv store.

Please share any challenges I might face during upgrade or any tips. 

ta 

[harsmarvania57]

Hi,

You can upgrade Deployment Server, Heavy Forwarders after LM, CM, IDXC, SHC upgrade. I'll highly recommend you to take KVStore backup before upgrade.