How to disable Splunk app using deployment server?
Hi all, I have deployed an app using a deployment server in Splunk. Suppose I got a new update for that app and I need to upgrade it. I have below search: 1. Since I am using deployment server to push...
View ArticleCan we use the two sites of a multisite indexer cluster to improve the Splunk...
I wonder whether during a Splunk upgrade we can use our two sites of the multisite indexer cluster to improve the Splunk upgrade. Meaning, is it possible to upgrade the indexers of one site and then...
View ArticleIs it possible to upgrade from 6.0 to 7.0 directly?
Hello, I have not found any definitive info on upgrading from Splunk 6.0 to 7.0 I would like to go from our very old version to 7.0 - and then even later if possible. I have only one Windows 2012 VM...
View ArticleEscape character is not working in search
Hi. I have a problem that use Escape character in Search App and Single Value Visualization. In older project, built dashboard panel that use Escape Character like this : index=..... (Data Search...
View ArticleIssue Splunk version upgrade from 7.0.3 to 7.2.6
Hi, I'm currently upgrading Splunk version from 7.0.3 to 7.2.6. if i do manual upgrade its working fine. But if I try to do via automated Jenkins pipeline its showing you are installing Splunk first...
View ArticleSplunk ITSI Requirement
Hello Splunkers.. I need urgent assistance in setting up Splunk ITSI. Our current Infrastructure is a distributed one running on Splunk version 6.0.1. Present Infrastructure where Splunk 6.0.1 is...
View ArticleUpgrade multiple clusters splunk from 7.1.0 to 7.2.7
Hi All I have two splunk clusters. Each cluster has 2 sites **Cluster 1 Site 1:** 3 Search Head, License Master, Index cluster master, 4 indexer, Deployment server, Search Head deployer/HF2, and HF1...
View ArticleSplunk Upgrade from 6.4.3 to 6.5.2 in Linux
Hi All, We are planning to upgrade Splunk from 6.4.3 to 6.5.2 before we upgrade to 7.2 or 7.3 , I can see the installation uses symbolic link to the Splunk version, in our case its splunk-6.4.3 linked...
View ArticleUpgrading app and addon
Hello Team, Need Help for Upgrading app and addon for Search head cluster We have working on search head cluster and doing works on apps , if we make any change or saved some dashboard data on search...
View ArticleDifference Splunk version 7.2 and 7.3
Hello All, I just wanted to know the difference between Splunk version 7.2.0 & 7.3.0. Also why we are moving from 7.1 (what was observed in 7.1) to 7.2.0/7.3.0.For say if you suggest 7.2.0 I would...
View ArticleHow to upgrade Search head pooling in upgrading Splunk from 6.0.1 to 7.2.3
Hi, I need urgent assistance on upgrading Search head pooling. Mine is distributed environment(6.0.1) with below details Two indexers(Clustered) Two search heads(SHP) One Cluster master As per the...
View ArticleSplunkd is running after ./splunk stop command
Hii all, I have created a copy of splunk instance, in the same server for testing purpose.. in this new splunk we will upgrade the version n check if the apps are working fine or not... I copied some...
View ArticleHow to upgrade the one indexer in indexer cluster
Hi, Recently we have upgraded the splunk indexer cluster to 7.2.6 but our team is miss to upgrade one indexer node. Can anyone help with the process of upgrading the single indexer node in a cluster...
View ArticleHow long does Splunk 7.3 take to install? Upgrading from 6.6.1
Just like the title says, I'm updating from 6.6.1 to 7.3 and I'm just curious how long the installation takes. we only have the one app server, no premium apps. Most things are not even configured so...
View ArticleDifferent Splunk Version in Indexer Cluster
Hey everyone, I am running an indexer cluster, single site, version 6.x and want to upgrade to 7.x. I saw here that the only way to do it is to bring down the whole cluster, upgrade, then bring it up....
View ArticleES Upgrade 4.7.1 to 5.2.0 (customized .xml, .json files functionality)
Hi Team, We are performing Splunk ES upgrade from 4.7.1 to 5.2.0. Post upgrade, I have few .xml, .json files that needs to be mapped to ES5.2.0 For ex: We have customized correlation_search_edit.xml in...
View Articlemigration of 6.6.3 to 7.2.5
We have Splunk 6.6.3 on a Windows 2008 server and need to migrate to a windows 2016 server. At the same time we are upgrading Splunk to version 7.2.5 What would be the best approach to this migration?
View ArticleReboots required after app/add-on update
I am preparing to upgrade numerous apps and add-ons. I will be using deployment server for all changes. The changes will affect searchheads, indexers, and forwarders. How do I determine if the target...
View ArticleHow do I benchmark system health before a Splunk Enterprise upgrade?
I need details about what to check before I upgrade so I know if my deployment is ready to upgrade. What do I monitor, and how do I benchmark system health before the upgrade?
View ArticleHow do I monitor system health during a Splunk Enterprise upgrade?
I need details about what to monitor during my upgrade so I know it is proceeding as expected. What should I monitor during an upgrade?
View Article