Hi All, Ours is a distributed environment and I am planning to upgrade Splunk search heads which are currently running with the version 6.0.3 to 6.2.1. to sync the version with other Splunk components as they are already running with 6.2.1.
Both the search head are installed in VM Linux environment (Red Hat Enterprise Linux Server release 6.7 (Santiago) ).
Using splunk as sudo root user
Steps to upgrade –
Search head 01
1) Initial steps before doing the upgrade need to take the entire configuration step up backed up by executing ./splunk diag
2) Once the entire splunk folder is backed up, need to stop the splunk service by executing the below command
/opt/splunk/bin/splunk stop
3) Remove the entire splunk folder by executing the rm –rf command
rm –rf /opt/splunk
4) Download the splunk version Splunk 6.2.1 (build 245427) from this link
https://www.splunk.com/eula/splunk/6.2.1?redirecturl=https%3A%2F%2Fwww.splunk.com%2Fpage%2Fdownload_track%3Ffile%3D6.2.1%2Flinux%2Fsplunk-6.2.1-245427-Linux-x86_64.tgz%26platform%3DLinux%26architecture%3Dx86_64%26version%3D6.2.1%26product%3Dsplunk%26typed%3Drelease%26name%3Dlinux_installer
5) Install the tar file in under the /opt directory by executing the below command.
tar xvzf splunk-6.2.1-245427-Linux-x86_64.tgz -C /opt
6) Once installed then start the splunk service by executing the below command
/opt/splunk/bin/ splunk start --accept-license
7) Follow the same steps for another search head 02
kindly guide me whether these are steps should be followed to upgrade from 6.0.3 to 6.2.1 and also about splunk shared pooling server.
Thanks in Advance.
↧