Splunk Enterprise Security

Is it possible to Splunk 6 version to version 9 rolling upgrade?

jamesjung01
Explorer

is it possible to splunk 6 version to version 9 rolling upgrade?

Labels (1)
Tags (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

ii is not possible. Rolling update option comes to splunk on version 7.x not in 6. 
You must check from installation/update guide to which versions you must go first before you could update to 9. If I recall right you need to use at least two middle versions. Firstly you must do offline upgrades and start splunk with those middle versions later you could do rolling updates. 
r. Ismo

0 Karma

jamesjung01
Explorer

is it possible rolling upgrade 6 -> 7

you mean version 6 can't upgrade to 9?

0 Karma

isoutamo
SplunkTrust
SplunkTrust

You must do offline upgrade first to 7.1.0 or newer version as rolling update has presented in 7.1.0. https://docs.splunk.com/Documentation/Splunk/9.0.3/Indexer/Searchablerollingupgrade
After that you can perform rolling updates to the newer version as described on manual. BUT you cannot do it directly from 7 to 9! Instead of it you must do those intermediate updates first. 

Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...