Splunk Enterprise

Splunk Migration of Search Head and Deployment Server from old Linux Distro to new Linux Distro

n3wbi3
Loves-to-Learn Lots

I want to migrate my clustered environment from one Linux to another.

Is it possible to migrate search head and deployment server first and then the indexers on the other day?

CentOS and the new distro is RHEL? Any Ideas or suggestions?

Labels (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

There are many threads about migrating environments in different scenarios. Use the search 🙂

General idea is that your environment should be consistent in terms of used OS and its version but there is no explicit requirement that SH tier must be on the same OS distribution as the indexer-tier (although it is of course best to have a relatively homogenous environment for maintenance reasons) or that the DS must be on the same OS as SHs.

 

0 Karma

fredclown
Builder

This is the beauty of using DNS CNames to reference all your Splunk servers in configuration. Ideally you don't put references to any physical names in your configs. That way when you switch servers you can build your new server along side your old server and then when you want to switch to a new servers you just flip the CName over to the new server.

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...