Installation

Upgrading Splunk Docker Container from 7.0.0 to 7.2.3

johan1252
New Member

In the following article it says that upgrades from sub 7.2.0 containers to 7.2.0+ containers is not supported.
https://www.splunk.com/blog/2018/10/24/announcing-splunk-on-docker.html

Is there a way to migrate from an older container (7.0.0) to 7.2.3 even if it is unsupported?

Labels (1)
0 Karma
1 Solution

chrisyounger
SplunkTrust
SplunkTrust

Hi @johan1252

The upgrade process is pretty simple even though it isn't officially supported. If you used the official 7.0.0 docker images then you will most likely have the /var and /etc directories mapped outside of your container. These will work just fine if you pull the new image and set the the paths the same.

While this process is simple, you are right that it isn't officially supported.

All the best.

View solution in original post

0 Karma

johan1252
New Member

For others, my issue was solved by upping the health check time out (I'm using Amazon Container Service - ECS) when doing the upgrade as the new version seems to take longer to boot. Same process as just launching the new image from scratch though.

0 Karma

chrisyounger
SplunkTrust
SplunkTrust

Hi @johan1252

The upgrade process is pretty simple even though it isn't officially supported. If you used the official 7.0.0 docker images then you will most likely have the /var and /etc directories mapped outside of your container. These will work just fine if you pull the new image and set the the paths the same.

While this process is simple, you are right that it isn't officially supported.

All the best.

0 Karma

yannK
Splunk Employee
Splunk Employee

Since Splunk 7.2, there is a way to upgrade Splunk in the container, but only if it has been created using external persistent mounts.

see storage requirements for remote mount for $SPLUNK_HOME/etc/

https://splunk.github.io/docker-splunk/STORAGE_OPTIONS.html

 

see upgrade steps :

https://github.com/splunk/docker-splunk/blob/03df47cc4505793257f7f1ab41b3926f4173dc10/docs/STORAGE_O...

 

 

0 Karma

sloshburch
Splunk Employee
Splunk Employee

Update: Supported now, right?

0 Karma

mattymo
Splunk Employee
Splunk Employee

The process is supported for 7.2+, aka the "Splunk Offcial Images"

7.1.x and below is the retired "Community legacy images" and will not be supported, though, as described above, should work fine if persistent volumes were used.

- MattyMo
0 Karma

mattymo
Splunk Employee
Splunk Employee

Splunk Enterprise Version 7.2.0 and later versions will be officially supported by Splunk. Versions earlier than 7.2.0 will still be available but will be community supported Upgrade from an earlier version to 7.2.0 and later versions will not be supported.

https://www.splunk.com/blog/2018/10/24/announcing-splunk-on-docker.html
(see datasheet)

https://github.com/splunk/docker-splunk/blob/develop/docs/INTRODUCTION.md#history

https://splunk.github.io/docker-splunk/SUPPORT.html

https://splunk.github.io/docker-splunk/

- MattyMo
0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...