Where do I find Splunk files (tar, iso,..) to upgrade from Version 6.2 to 6.4.2 or 6.4.3?

[kamalm2k]

Hi Dears,

I am new to Splunk and I need to upgrade it from Version 6.2 to 6.4.2 or 6.4.3, whatever is the latest.
I have gone through the manuals and I can only find the procedure of the upgrade, which was quite informative. However, I didn't find where to find the images or the files that contains this upgrade and run it.

I believe I need to upgrade the search head, then the indexers. Does each one of these have an image or tar file for example? I really didn't get that point and I need guidance from you guys.

As a Qradar Admin, I have an iso image that I will run it and follow some steps to upgrade. How similar is Splunk?

Much Appreciated.

[MuS · Accepted solution]

Hi kamalm2k,

you can download the latest Splunk version here https://www.splunk.com/en_us/download/splunk-enterprise.html
You can choose between tar zips, rpm, deb packages, msi install files or other available formats.

Yes, you need to upgrade each Slunk instance in the order you mentioned.

Hope this helps ...

cheers, MuS

[kamalm2k]

Thank you dear for your help.
Please correct me if I am wrong. I need to use the same downloaded package to update all instance, where I will run this command in each and every instance.

rpm -U splunk_package_name.rpm

I have Cluster Search head and Cluster Indexer. I will update it all using the very same package!

Thanks a lot.

[MuS]

Yes, you run the same command on every instance.

[kamalm2k]

Thank you dear for your help.
Please correct me if I am wrong. I need to use the same downloaded package to update all instance, where I will run this command in each and every instance.

rpm -U splunk_package_name.rpm

I have Cluster Search head and Cluster Indexer. I will update it all using the very same package!

Thanks a lot.