Splunk Enterprise Security

Reverting to Splunk Enterprise v7.0.x from v7.1.2.

Explorer

I am running Splunk ES v4.7.2 and upgraded it, along with the rest of my servers to Splunk Enterprise v7.1.2. After having some issues, I found that ESv4.7.2 isn't compatible with v7.1.2. What steps do I need to take in order to revert my Splunk ES server back to Splunk Enterprise v7.0.x?

Thanks!

0 Karma

Splunk Employee
Splunk Employee

Upgrade ES to version 5.1.x rather than downgrading Splunk Enterprise.