Splunk Search

Splunk Maintenance Window

ramprakash
Explorer

Hello Splunkers,

In my organization Patching activity has been scheduled and under that all my splunk components will be down i.e Search head,Indexers,Master server etc.

I need to bring all the Splunk components down and then restart them after 9 hours of maintenance.
Can anyone tell me any standard procedure to do this activity. Like which component should be down and bring up first.

I will really appreciate help on this.

Regards,
Devang

0 Karma
Get Updates on the Splunk Community!

Developer Spotlight with Brett Adams

In our third Spotlight feature, we're excited to shine a light on Brett—a Splunk consultant, innovative ...

Index This | What can you do to make 55,555 equal 500?

April 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Say goodbye to manually analyzing phishing and malware threats with Splunk Attack ...

In today’s evolving threat landscape, we understand you’re constantly bombarded with phishing and malware ...