Splunk Enterprise

Splunk Version upgrade 9.0.3 to 9.1.0

Sathish28
Engager

Hi All,

I am planning to upgrade Splunk Enterprise app in production 

Our Splunk Environment has
1 - Cluster master
4 - indexer
1 - deployment server
1- Search Head
1- monitoring console
1- License Master

is it possible to have the Search head in 9.0.3 version and the remaining Splunk server to be upgrade to 9.1.0 
the search head role is provided to other servers also in our environment

0 Karma

PaulPanther
Motivator

Check out:

[..]

  • The search head must be at the same or a higher level than the search peers. See the note later in this section for a precise definition of "level" in this context.

[..]

System requirements and other deployment considerations for distributed search - Splunk Documentatio...

0 Karma
Get Updates on the Splunk Community!

Infographic provides the TL;DR for the 2024 Splunk Career Impact Report

We’ve been buzzing with excitement about the recent validation of Splunk Education! The 2024 Splunk Career ...

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...