Splunk Enterprise Security

Is it possible to Splunk 6 version to version 9 rolling upgrade?

jamesjung01
Explorer

is it possible to splunk 6 version to version 9 rolling upgrade?

Labels (1)
Tags (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

ii is not possible. Rolling update option comes to splunk on version 7.x not in 6. 
You must check from installation/update guide to which versions you must go first before you could update to 9. If I recall right you need to use at least two middle versions. Firstly you must do offline upgrades and start splunk with those middle versions later you could do rolling updates. 
r. Ismo

0 Karma

jamesjung01
Explorer

is it possible rolling upgrade 6 -> 7

you mean version 6 can't upgrade to 9?

0 Karma

isoutamo
SplunkTrust
SplunkTrust

You must do offline upgrade first to 7.1.0 or newer version as rolling update has presented in 7.1.0. https://docs.splunk.com/Documentation/Splunk/9.0.3/Indexer/Searchablerollingupgrade
After that you can perform rolling updates to the newer version as described on manual. BUT you cannot do it directly from 7 to 9! Instead of it you must do those intermediate updates first. 

Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...