
Upgrade to 6.2 on Windows
This topic describes the procedure for upgrading your Windows Splunk Enterprise instance from versions 5.0 and later to 6.2. You can upgrade using the GUI installer, or by running the msiexec
utility on the command line as described in "Install on Windows via the command line".
Before you upgrade
Read this information before proceeding, as well as the following:
Make sure you specify the same domain user
When upgrading, you must explicitly specify the same domain user that you specified during first time install. If you do not specify the same user, Splunk Enterprise defaults to using the Local System User. If you accidentally specify the wrong user during your installation, use these instructions to switch to the correct user before starting Splunk.
Don't change the ports
Splunk Enterprise does not support changing the management port and/or the HTTP port when upgrading.
Back your files up
Before you perform the upgrade, we strongly recommend that you back up all of your files, including Splunk Enterprise configurations, indexed data and binaries. Splunk does not provide a means of downgrading to previous versions; if you need to revert to an older Splunk Enterprise release, just reinstall it.
For information on backing up data, read "Back up indexed data" in the Managing Indexers and Clusters Manual.
For information on backing up configurations, read "Back up configuration information" in the Admin manual.
Note: When you upgrade to Splunk Enterprise 6.2 on Windows, the installer overwrites any custom certificate authority (CA) certificates you have created in %SPLUNK_HOME%\etc\auth
. If you have custom CA files, make sure to back them up before you upgrade. After the upgrade, you can copy them back into %SPLUNK_HOME%\etc\auth
to restore them. After you have restored the certificates, restart Splunk.
Don't attempt to downgrade after you've upgraded
After you upgrade Splunk Enterprise to version 6.2, if you need to downgrade, you must uninstall version 6.2 and then reinstall the previous version of Splunk Enterprise that you were using. Do not attempt to install over a Splunk Enterprise 6.2 installation with an installer from a previous version. Doing so can result in a corrupt instance and data loss.
Upgrade using the GUI installer
1. Download the new MSI file from the Splunk download page.
2. Double-click the MSI file. The installer runs and attempts to detect the existing version of Splunk Enterprise installed on the machine. When it locates the older version, it displays a pane that asks you to accept the licensing agreement.
3. Accept the license agreement. The installer then installs the updated Splunk Enterprise, retaining all parameters from the existing installation. By default, the installer restarts Splunk Enterprise when the installation completes.
The installer places a log of the changes made to configuration files during the upgrade in %TEMP%
.
Upgrade using the command line
1. Download the new MSI file from the Splunk download page.
2. Use the instructions in "Install on Windows via the command line".
- If Splunk runs as a user other than the Local System user, you must explicitly specify this user in your command-line instruction.
- You can use the
LAUNCHSPLUNK
flag to specify whether Splunk Enterprise should start up automatically or not when you're finished, but you cannot change any other settings. - Do not change the ports (
SPLUNKD_PORT
andWEB_PORT
) at this time.
3. Depending on your specification, Splunk Enterprise might start automatically when you complete the installation.
The installer places a log of the changes made to configuration files during the upgrade in %TEMP%
.
Start Splunk Enterprise
On Windows, Splunk Enterprise installs by default into %SYSTEMDRIVE%\Program Files\Splunk
and starts by default.
You can start and stop the following Splunk Enterprise processes via the Windows Services control panel:
- Server and Web interface:
splunkd
You can also start, stop, and restart both processes at once by going to %SYSTEMDRIVE%\Program Files\Splunk\bin
and typing
# splunk [start|stop|restart]
PREVIOUS Upgrade to 6.2 on UNIX |
NEXT Migrate a Splunk Enterprise instance |
This documentation applies to the following versions of Splunk® Enterprise: 6.2.0, 6.2.1, 6.2.2, 6.2.3, 6.2.4, 6.2.5, 6.2.6, 6.2.7, 6.2.8, 6.2.9, 6.2.10, 6.2.11, 6.2.12, 6.2.13, 6.2.14, 6.2.15
Feedback submitted, thanks!