Splunk 6.0 & Enterprise Security

[echojacques]

I was holding off an upgrade from Splunk 5.0.4 to Splunk 6.0 due to compatibility problems with ES (Enterprise Security) version 2.4.1. However, ES 3.0 is now available and according to the release notes, it's compatible with Splunk 6 which means I can finally upgrade to Splunk 6 🙂

My question is, should I upgrade my Splunk or ES first?

Thanks.

[ChrisG · Accepted solution]

The Splunk App for Enterprise Security is compatible with Splunk Enterprise 6.0 but not Splunk Enterprise 5.0. So you should upgrade Splunk before ES.

[echojacques]

That makes sense. Thanks!