Splunk Enterprise Security

Is it possible to Splunk 6 version to version 9 rolling upgrade?

jamesjung01
Explorer

is it possible to splunk 6 version to version 9 rolling upgrade?

Labels (1)
Tags (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

ii is not possible. Rolling update option comes to splunk on version 7.x not in 6. 
You must check from installation/update guide to which versions you must go first before you could update to 9. If I recall right you need to use at least two middle versions. Firstly you must do offline upgrades and start splunk with those middle versions later you could do rolling updates. 
r. Ismo

0 Karma

jamesjung01
Explorer

is it possible rolling upgrade 6 -> 7

you mean version 6 can't upgrade to 9?

0 Karma

isoutamo
SplunkTrust
SplunkTrust

You must do offline upgrade first to 7.1.0 or newer version as rolling update has presented in 7.1.0. https://docs.splunk.com/Documentation/Splunk/9.0.3/Indexer/Searchablerollingupgrade
After that you can perform rolling updates to the newer version as described on manual. BUT you cannot do it directly from 7 to 9! Instead of it you must do those intermediate updates first. 

First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...