@aasabatini wrote: HI @Gh0st_rid3r Put the cluster in maintenance mode, stop the cluster master, shut down the cluster master, perform the upgrade, restart the cluster master, restart splunk (note splunk may be set to auto start), exiting maintenance mode occurs automatically with restarts. Maintenance mode does not persist across master restarts. http://docs.splunk.com/Documentation/Splunk/6.5.2/Indexer/Usemaintenancemode Hi @aasabatini , But that applies to the cluster master setup. In our environment, We dont have a cluster master. Just the primary & backup indexers as same as search head. A deployment server for the configuration as per my knowledge. But thanks anyway.
... View more