Upgrade Splunk Enterprise from 8.x to 9.x

[Amirahussein]

We are currently required to upgrade our Splunk environment from version 8.2.4 to version 9.x, and we are concerned about any differences in Splunk SPL function functionality, as we encountered "streamstats" during our previous upgrade to version 8.2.4.

below are the components of our environment:
1- Three heavy forwarders
2- Clustering of indexers: One master machine and three indexers
3- Search Clustering: One SHC and three Search members
4- Standalone search machine
5- Two Splunk DB Connect machines
 6- Deployer used to manage external universal forwarders installed on external nodes to collect real-time data.

So, if anyone encounters any major issues following the upgrade, please share them with me so that they can be taken into account, and this will be greatly appreciated.

[SanjayReddy]

Hi @Amirahussein 

for upgrade from Splunk 8.x to 9.x 
please refer to About upgrading to 9.0 READ THIS FIRST for ket notes and important changes.

https://docs.splunk.com/Documentation/Splunk/9.0.4/Installation/AboutupgradingREADTHISFIRST 

release notes for any thing to consider before upgrade 

https://docs.splunk.com/Documentation/Splunk/9.0.4/ReleaseNotes/MeetSplunk

depracted or remvoed features list similar to streamstats command 

https://docs.splunk.com/Documentation/Splunk/9.0.4/ReleaseNotes/Deprecatedfeatures 

Knows Issues

https://docs.splunk.com/Documentation/Splunk/9.0.4/ReleaseNotes/Knownissues 

----
Regards,
Sanjay Reddy

----
If this reply helps you, Karma would be appreciated