Splunk Enterprise Security

Enterprise Upgrade Path

joonoyang
Engager

Hi Splunk forks,

I would like to make sure if the following upgrade path is okay. We have ES 4.5.1 running on Splunk Enterprise 6.5.1 and the below is what I’m thinking.
First, Upgrade to ES 4.7.4
Second. Upgrade to Splunk 7.0
Third. Upgrade to ES 5.0

Thanks in advance.
Joon

0 Karma

smoir_splunk
Splunk Employee
Splunk Employee

Joon, your proposed upgrade path looks great. If you can do it all in one maintenance window, what @mdessus suggests should work. If you need to do it progressively over several maintenance windows, follow the steps you outline in your question.

0 Karma

mdessus_splunk
Splunk Employee
Splunk Employee

Hi Joon,

you should be able to upgrade Spluk core to 7.0 and then upgrade ES directly to 5.0 ( http://docs.splunk.com/Documentation/ES/5.0.0/Install/Beforeupgrading ).

Regards

Get Updates on the Splunk Community!

Updated Team Landing Page in Splunk Observability

We’re making some changes to the team landing page in Splunk Observability, based on your feedback. The ...

New! Splunk Observability Search Enhancements for Splunk APM Services/Traces and ...

Regardless of where you are in Splunk Observability, you can search for relevant APM targets including service ...

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...