Hello, You don't need to upgrade the forwarders. The indexers are backward compatible. But if you have cluster upgrade them to same versions. http://docs.splunk.com/Documentation/Splunk/6.1.2/Forwarding/Compatibilitybetweenforwardersandindexers Thanks, L ... View more