Splunk Enterprise

CM and IDX Different Splunk Enterprise Versions?

SplunkNinja
Path Finder

One of my colleagues said we could be running different Splunk Enterprise versions on the CM and IDX Cluster.  For example, he said that we could run the IDX Cluster at Splunk 9.0.x and the CM at Splunk 8.1.x.  

This does not sound like a Splunk best practice to me.  But is it technically possible?  Do all Indexers need to be running the same version of Splunk?

Labels (3)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Technically, just about anything is possible, but perhaps not advisable.  Running a CM with an older version than the indexers falls into the latter category.  It can be done (and I've heard of customers doing so), but it's an unsupported configuration.  If they can't be the same then the CM should be newer.

Yes, all indexers should run the same version of Splunk (except during an upgrade).

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

Technically, just about anything is possible, but perhaps not advisable.  Running a CM with an older version than the indexers falls into the latter category.  It can be done (and I've heard of customers doing so), but it's an unsupported configuration.  If they can't be the same then the CM should be newer.

Yes, all indexers should run the same version of Splunk (except during an upgrade).

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

How to Monitor Google Kubernetes Engine (GKE)

We’ve looked at how to integrate Kubernetes environments with Splunk Observability Cloud, but what about ...

Index This | How can you make 45 using only 4?

October 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Splunk Education Goes to Washington | Splunk GovSummit 2024

If you’re in the Washington, D.C. area, this is your opportunity to take your career and Splunk skills to the ...