Splunk Enterprise

Is it unsafe to upgrade from 7.0.x to 8.2.x?

verbal_666
Contributor

I'm reading the official Documentation ( https://docs.splunk.com/Documentation/Splunk/8.2.0/Installation/HowtoupgradeSplunk ), which warn not to update Splunk from 7.0.x to 8.2.6 directly,

7.0.x 8.0.x or 8.1.x 8.2.x


Documentation suggests to make a middle update to 8.0.x/8.1.x, and then 8.2.x.

Why? Is it so unsafe to make 7.0.x to 8.2.x?

Asking since i'll soon need to replace my very old 7.0.x with 8.2.x.

Thanks 👍

Labels (1)
0 Karma
1 Solution

verbal_666
Contributor

Thanks a lot.
To avoid problems, i'll then do a 7.0.x --> 8.1.x --> 8.2.x 👍
I prefer to avoid any kind of data corruption or so 😬

View solution in original post

0 Karma

verbal_666
Contributor

Thanks a lot.
To avoid problems, i'll then do a 7.0.x --> 8.1.x --> 8.2.x 👍
I prefer to avoid any kind of data corruption or so 😬

0 Karma

richgalloway
SplunkTrust
SplunkTrust

The interim step is needed because 8.2.6 doesn't support migrating from that version (it may have been unsupported when 8.2.6 was released).

You can try upgrading to 8.2.6 directly, but it would be risky.  Some necessary conversions may be missing, which could lead to unexpected behavior.

---
If this reply helps you, Karma would be appreciated.

verbal_666
Contributor

Thanks a lot.
To avoid problems, i'll then do a 7.0.x --> 8.1.x --> 8.2.x 👍


I prefer to avoid any kind of data corruption or so 😬

0 Karma
Get Updates on the Splunk Community!

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

Observability Newsletter Highlights | March 2023

 March 2023 | Check out the latest and greatestSplunk APM's New Tag Filter ExperienceSplunk APM has updated ...

Security Newsletter Updates | March 2023

 March 2023 | Check out the latest and greatestUnify Your Security Operations with Splunk Mission Control The ...