Upgrading Splunk Docker Container from 7.0.0 to 7.2.3

[johan1252]

In the following article it says that upgrades from sub 7.2.0 containers to 7.2.0+ containers is not supported.
https://www.splunk.com/blog/2018/10/24/announcing-splunk-on-docker.html

Is there a way to migrate from an older container (7.0.0) to 7.2.3 even if it is unsupported?

[johan1252]

For others, my issue was solved by upping the health check time out (I'm using Amazon Container Service - ECS) when doing the upgrade as the new version seems to take longer to boot. Same process as just launching the new image from scratch though.

[chrisyounger · Accepted solution]

Hi @johan1252

The upgrade process is pretty simple even though it isn't officially supported. If you used the official 7.0.0 docker images then you will most likely have the /var and /etc directories mapped outside of your container. These will work just fine if you pull the new image and set the the paths the same.

While this process is simple, you are right that it isn't officially supported.

All the best.

[yannK]

Since Splunk 7.2, there is a way to upgrade Splunk in the container, but only if it has been created using external persistent mounts.

see storage requirements for remote mount for $SPLUNK_HOME/etc/

https://splunk.github.io/docker-splunk/STORAGE_OPTIONS.html

see upgrade steps :

https://github.com/splunk/docker-splunk/blob/03df47cc4505793257f7f1ab41b3926f4173dc10/docs/STORAGE_O...

[sloshburch]

Update: Supported now, right?

[mattymo]

The process is supported for 7.2+, aka the "Splunk Offcial Images"

7.1.x and below is the retired "Community legacy images" and will not be supported, though, as described above, should work fine if persistent volumes were used.

[mattymo]

Splunk Enterprise Version 7.2.0 and later versions will be officially supported by Splunk. Versions earlier than 7.2.0 will still be available but will be community supported Upgrade from an earlier version to 7.2.0 and later versions will not be supported.

https://www.splunk.com/blog/2018/10/24/announcing-splunk-on-docker.html
(see datasheet)

https://github.com/splunk/docker-splunk/blob/develop/docs/INTRODUCTION.md#history

https://splunk.github.io/docker-splunk/SUPPORT.html

https://splunk.github.io/docker-splunk/