Splunk Enterprise Security

Is it possible to Splunk 6 version to version 9 rolling upgrade?

jamesjung01
Explorer

is it possible to splunk 6 version to version 9 rolling upgrade?

Labels (1)
Tags (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

ii is not possible. Rolling update option comes to splunk on version 7.x not in 6. 
You must check from installation/update guide to which versions you must go first before you could update to 9. If I recall right you need to use at least two middle versions. Firstly you must do offline upgrades and start splunk with those middle versions later you could do rolling updates. 
r. Ismo

0 Karma

jamesjung01
Explorer

is it possible rolling upgrade 6 -> 7

you mean version 6 can't upgrade to 9?

0 Karma

isoutamo
SplunkTrust
SplunkTrust

You must do offline upgrade first to 7.1.0 or newer version as rolling update has presented in 7.1.0. https://docs.splunk.com/Documentation/Splunk/9.0.3/Indexer/Searchablerollingupgrade
After that you can perform rolling updates to the newer version as described on manual. BUT you cannot do it directly from 7 to 9! Instead of it you must do those intermediate updates first. 

Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...