I have existing splunk setup with 2 indexers and 2 forwarders with clustered architecture. Now we are tryimg to upgrade and introduce new h/w for syslog and additional forwarders and indexers. What would be the best way to upgrade environment.
↧