Hi,
We are upgrading to Splunk 6.4.1, but in multiple stages, the second stage being migrating to Search Head Clustering. Will Search Head Pooling work in Splunk 6.4.1? I know that it's deprecated, but will it still function?
It will still function, but as you know, it's deprecated. I'm not sure if support will even officially support it also.
Upgrade-wise, follow the standard SHP upgrade process and it should work.
According to Deprecated features
it should work and probably supported.
It says -
-- Previously deprecated features that still work
-- 6.2.x:
-- Search Head Pooling over the Network File System (NFS) protocol. As an alternative, configure search head clustering.