All Apps and Add-ons

Can I stop Splunk, take a VM snapshot, upgrade Splunk, then revert to the snapshot after the upgrade?

hrithiktej
Communicator

We have 6 splunk servers

1 SH
1 enterprise security
1 license + cluster master
2 Indexers
1 deployment server

I will be stopping Splunk services and take a snapshot of all VMs and then perform the upgrade if anything goes wrong during the upgrade I am planning to revert to snapshots, is this the best practice or will reverting to snapshot break anything?

0 Karma
1 Solution

cpetterborg
SplunkTrust
SplunkTrust

I don't know if there is a migration for the data (index) files or not when going from 6.x to 7.0, but that would be my first concern in reverting back to the previous snapshot. If your indexed data is not in the snapshot you could have a problem reverting. Check out if that is the case BEFORE proceeding.

Good luck on 7.0 in production. If you have a dev or test or stage environment, do that first. I'm personally waiting for 7.0.1 before proceeding with anything other than dev.

View solution in original post

0 Karma

cpetterborg
SplunkTrust
SplunkTrust

I don't know if there is a migration for the data (index) files or not when going from 6.x to 7.0, but that would be my first concern in reverting back to the previous snapshot. If your indexed data is not in the snapshot you could have a problem reverting. Check out if that is the case BEFORE proceeding.

Good luck on 7.0 in production. If you have a dev or test or stage environment, do that first. I'm personally waiting for 7.0.1 before proceeding with anything other than dev.

0 Karma

hrithiktej
Communicator

Thanks, I think I will go for 6.6.3 rather than V7 now.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...