Hi
Am upgrading splunk from 4.2.3 to 5.0.6
i have indexers, srch heads and forwarders.
give me your suggestions always welcome
Thanks
GV
The documentation; will answer your question: http://docs.splunk.com/Documentation/Splunk/5.0.6/Installation/HowtoupgradeSplunk
when upgrading to 5.0.x, going from 4.2.x is a supported path. Going to 6.x you have to be on 4.3+.
There is also a list of things to consider and warnings on back ups before you update. The subtopics will answer questions around upgrade order for distributed environments and/or the order of forwarder upgrades in relation to your servers.
See this answer, you'll need to upgrade to 4.3 first. Then you could upgrade directly to Splunk 5.0.6 or to our latest release which is Splunk 6.0.
http://answers.splunk.com//answers/105161/upgrading-to-splunk-6
You will need to upgrade to Splunk 4.3 first and then from 4.3 to 5.