Splunk components version compatibility

[ricotries]

I have a Splunk server which runs both the Deployment Server and the License Master running on version 8.2.4. Due to the CVE released related to the Deployment Server, I would like to upgrade this server to 9.0 and I don't expect any issues between the DS and the universal forwarders.

My concern is with the License Master as this component communicates with the rest of the deployment. The latest documentation of version compatibility is found here: Configure a license master - Splunk Documentation, which is for 8.2.6 as there is no version (as of today, 6/21/2022) of this page for version 9.0.

Upgrading the entire Splunk Enterprise deployment right now is not feasible (we are planning in the near future to complete it), but upgrading this one component to mitigate the vulnerability is priority. Should I expect any issues with the licensing after the upgrade of the License Master when the major versions don't match with the rest of the deployment?

[isoutamo · Accepted solution]

IMHO: in IT you should always except issues especially with double donuts versions ;-(

Based on what I have read on last days there are some people already updated both DS and LM to the 9.0.0 and they haven’t gotten (yet) real issues.

r. Ismo

[isoutamo]

If the rumors in slack are valid there is already coming first patch for 9.0.0? I don’t know when, but probably sooner than later?