Hey everyone, I am running an indexer cluster, single site, version 6.x and want to upgrade to 7.x. I saw here that the only way to do it is to bring down the whole cluster, upgrade, then bring it up. https://docs.splunk.com/Documentation/Splunk/latest/Indexer/Upgradeacluster#Upgrade_a_6.x_or_7.x_indexer_cluster I want to avoid this situation and upgrade the cluster indexer by indexer -- no rolling upgrade in current version. By first enabling maintenance mode -> put offline peer offline -> upgrade and move on to the other. Problem is that the doc says that cluster shouldn't have peers with different versions : https://docs.splunk.com/Documentation/Splunk/latest/Indexer/Systemrequirements#Compatibility_between_peer_nodes All peer nodes must run the same version of Splunk Enterprise, down to the maintenance level. You must update all peer nodes to a new release at the same time. You cannot, for example, run an indexer cluster with some peer nodes at 6.n.2 and others at 6.n.1. Would this work anyway ? Is it possible to run indexers with different versions within the indexer cluster. AND what would happen if this is applied, would there be errors mentioning different versions or will things keep running ? Thx ... View more

hi, I have two teams each running their Splunk deployments and I need to have a centralized manner and woud like to be able of accessing the data and run my ML algorithms on subdata sets from both splunks. how is it possible ? how can I connect to two Splunk at the same time ? thanks -Bill ... View more