I am preparing to upgrade Splunk Enterprise from 6.5.0 to 6.5.1. There are several Apps and Add-ons that have upgrades as well.These include Splunk Common Information Model (CIM), Splunk App for Windows Infrastructure and Splunk Enterprise Security.
My question is, what is the correct order to do these upgrades?Do I update Splunk Enterprise first and then the Apps or do the Apps first?
Upgrade before Splunk Enterprise and then Apps.
Beware to the order of connected apps (e.g.: TAs and Apps): maintain the order described in the documentation (e.g.: if you have to install a TA before the corresponding App, maintain this order!).
View solution in original post
We just posted an order-of-operations diagram with links to relevant documentation to help with upgrade planning. Check it out and let us know if you find it helpful. What's the order of operations for upgrading Splunk Enterprise?