Installation

Whats the best way/ best practice to upgrade indexer, search head, heavy forwarder and universal forwarder that are not clustered?

rgodishela
Engager

We have an indexer, search head, heavy forwarder and universal forwarder. We manage them using Puppet. We are currently running 7.1.1. would like to upgrade them to latest version. These are not clustered. Whats the best way/ best practice to upgrade them??

0 Karma

adonio
Ultra Champion

first the SH, then the Indexer then the HF, and lastly the UF
see here:
http://docs.splunk.com/Documentation/Splunk/7.2.0/Installation/UpgradeyourdistributedSplunkEnterpris...

sloshburch
Splunk Employee
Splunk Employee

@jmulcaster_splunk just posted an order-of-operations diagram with links to relevant documentation to help with upgrade planning. Check it out and let us know if you find it helpful. What's the order of operations for upgrading Splunk Enterprise?

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...