Splunk Enterprise Security

Enterprise Upgrade Path

Engager

Hi Splunk forks,

I would like to make sure if the following upgrade path is okay. We have ES 4.5.1 running on Splunk Enterprise 6.5.1 and the below is what I’m thinking.
First, Upgrade to ES 4.7.4
Second. Upgrade to Splunk 7.0
Third. Upgrade to ES 5.0

Thanks in advance.
Joon

0 Karma

Splunk Employee
Splunk Employee

Joon, your proposed upgrade path looks great. If you can do it all in one maintenance window, what @mdessus suggests should work. If you need to do it progressively over several maintenance windows, follow the steps you outline in your question.

0 Karma

Splunk Employee
Splunk Employee

Hi Joon,

you should be able to upgrade Spluk core to 7.0 and then upgrade ES directly to 5.0 ( http://docs.splunk.com/Documentation/ES/5.0.0/Install/Beforeupgrading ).

Regards