Splunk Enterprise upgrade to Splunk Enterprise 8.0

[cyberportnoc]

Currently we are running Splunk Enterprise 6.5.3 and want to upgrade to 8.0. The server OS is Ubuntu 14.04.1 LTS.
How about I export the database and configuration, install 8.0 on a new server and then import those data? Is it possible?

[gcusello]

Hi @cyberportnoc,
you want to install move your Splunk instance on a new server and upgrade it, is it correct?
If this is your need, I'd follow these steps:

• install Splunk 6.5.3 on the new server, possibly using the same hostname;
• copy the etc folder from the old to the new instance;
• restart Splunk;
• if you cannot use the same hostname, you have to rename the hostname in $SPLUNK_HOME/etc/system/local/server.conf and $SPLUNK_HOME/etc/system/local/inputs.conf and then restart Splun;
• upgrade Splunk to an intermediate version (e.g. 7.0.x) (for more infos see at https://docs.splunk.com/Documentation/Splunk/8.0.2/Installation/HowtoupgradeSplunk );
• install the app Splunk Platform Upgrade Readiness App ( https://splunkbase.splunk.com/app/4698/ ) and check the status of your apps;
• upgrade Splunk to the latest version (today 8.0.2.1) following instructions at https://docs.splunk.com/Documentation/Splunk/8.0.2/Installation/UpgradeonUNIX ;
• upgrade Apps;
• upgrade Python to 3 following instructions at https://docs.splunk.com/Documentation/Splunk/8.0.2/Installation/PlanPython3 .

Ciao.
Giuseppe