Hi @Chiranjeev88, we're speaking about only Universal Forwarders, not Heavy, is it correct? in this case in documentation it is hinted to pass for an intermediate 7.x version and an intermediate 8 version, before arriving to 9 version, as you can read at https://docs.splunk.com/Documentation/Splunk/8.0.1/Installation/HowtoupgradeSplunk#Upgrade_paths_to_version_8.0 and https://docs.splunk.com/Documentation/Splunk/latest/Installation/HowtoupgradeSplunk#Upgrade_paths_to_version_9.0 . It's obviously important that the final version of the UFs is equal or lower than the version of the Indexers or Intermediate HFs. If you have HFs, you have to migrate them before starting with UFs. Ciao. Giuseppe
... View more