I am looking to upgrade the following and the approach below. My question is this upgrade optimal and will sustain? The storage, ram and cores are way below Splunk recommendation for SH. Will this effect performance?
Upgrade Splunk ES from 5.0.1 to 5.2.x (latest)
Upgrade Splunk servers from 7.0.x to 7.2.4.2 (latest)
1. Take backup of all SH and Indexers
2. Make a list of apps installed in SH and indexers, check for compatibility with 7.2.4.2
a. Identify splunk ES customizations, and document steps that needs to be configured post migration
3. Upgrade SHC https://docs.splunk.com/Documentation/Splunk/7.2.4/DistSearch/UpgradeaSHC
a. Perform a member-by-member upgrade
4. Upgrade Indexer cluster
5. Upgrade Splunk ES
Do you have any lessons learnt? Better method or documents?
-RR
↧