Hello,
Our current setup is: Deployment Server -> Multiple Forwarders -> Universal Forwarder/Indexer-> Server
I'm looking to upgrade the Deployment Server and the Universal Forwarder/Indexer from Splunk 6.1.1 to 6.3.1 and move it to a new server, since forwarders are backwards compatible.
I'm relatively new to Splunk and wanted to know the best way to go about this and the process. Would it be simpler to upgrade Splunk to the latest version in their current server, backup, and migrate them, or backup, migrate, and upgrade them?
Any information is greatly appreciated. Thank you!
↧