Splunk Enterprise Security

Is it possible to Splunk 6 version to version 9 rolling upgrade?

jamesjung01
Explorer

is it possible to splunk 6 version to version 9 rolling upgrade?

Labels (1)
Tags (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

ii is not possible. Rolling update option comes to splunk on version 7.x not in 6. 
You must check from installation/update guide to which versions you must go first before you could update to 9. If I recall right you need to use at least two middle versions. Firstly you must do offline upgrades and start splunk with those middle versions later you could do rolling updates. 
r. Ismo

0 Karma

jamesjung01
Explorer

is it possible rolling upgrade 6 -> 7

you mean version 6 can't upgrade to 9?

0 Karma

isoutamo
SplunkTrust
SplunkTrust

You must do offline upgrade first to 7.1.0 or newer version as rolling update has presented in 7.1.0. https://docs.splunk.com/Documentation/Splunk/9.0.3/Indexer/Searchablerollingupgrade
After that you can perform rolling updates to the newer version as described on manual. BUT you cannot do it directly from 7 to 9! Instead of it you must do those intermediate updates first. 

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...

Design, Compete, Win: Submit Your Best Splunk Dashboards for a .conf26 Pass

Hello Splunkers,  We’re excited to kick off a Splunk Dashboard contest! We know that dashboards are a primary ...

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...