I am running Splunk ES v4.7.2 and upgraded it, along with the rest of my servers to Splunk Enterprise v7.1.2. After having some issues, I found that ESv4.7.2 isn't compatible with v7.1.2. What steps do I need to take in order to revert my Splunk ES server back to Splunk Enterprise v7.0.x?
Thanks!
Upgrade ES to version 5.1.x rather than downgrading Splunk Enterprise.