Hi All,
We have deployed Splunk Cloud in our environment with version 7.2.9.1 and currently we have planned to upgrade to 8.0 and above.
So we have submitted a case for upgrade our Splunk to 8.0 and above at that time we came to know that the following add-on in ES-Search head is not compatible with Splunk Cloud 8.0 and above.
Add-On Information:
TA-QualysCloudPlatform version 1.4.0
https://splunkbase.splunk.com/app/2964/
So we have installed & configured the Add-on in Heavy Forwarder server as well as in ES-Search head. But i got the information as per the document stating that the Add-on is required in Search head as well. But completely not sure whether it is really required or not.
https://www.qualys.com/docs/qualys-ta-for-splunk.pdf
If its not required then we would go and uninstall the Add-on from ES- Search head then we can upgrade our Core Splunk to 8.0 and above.
So kindly help to check and update.
So how come can i overcome this issue and proceed with core upgrade to 8.0 and above.
