I'm reading the official Documentation ( https://docs.splunk.com/Documentation/Splunk/8.2.0/Installation/HowtoupgradeSplunk ), which warn not to update Splunk from 7.0.x to 8.2.6 directly,
|7.0.x||8.0.x or 8.1.x||8.2.x|
Documentation suggests to make a middle update to 8.0.x/8.1.x, and then 8.2.x.
Why? Is it so unsafe to make 7.0.x to 8.2.x?
Asking since i'll soon need to replace my very old 7.0.x with 8.2.x.
The interim step is needed because 8.2.6 doesn't support migrating from that version (it may have been unsupported when 8.2.6 was released).
You can try upgrading to 8.2.6 directly, but it would be risky. Some necessary conversions may be missing, which could lead to unexpected behavior.