Upgrading Graylog
  • 06 Sep 2022
  • 3 Minutes to read
  • Dark
    Light

Upgrading Graylog

  • Dark
    Light

When upgrading from a previous version of Graylog, follow the previously used installation method (e.g. operating system package) using the new version numbers.

The following upgrade notes should be read carefully before you start the upgrade process. Breaking changes and dependency upgrades are documented in those upgrade notes.

Always follow minor versions when updating across multiple versions to make sure necessary migrations are run correctly. The upgrade notes are always written coming from the stable release before.

Upgrading Graylog Originally Installed from Package

If the current installation was installed using a package manager (ex. yum, apt), update the repository package to the target version and use the system tools to upgrade the package. For .rpm based systems this update guide and for .deb based systems this update guide should help.

Version Compatibility

Prior to upgrading, consult the following tables for compatability with supported versions of Elasticsearch and MongoDB.

ELASTICSEARCH COMPATIBILITY

GRAYLOG VERSION MINIMUM ES VERSIoN MAXIMUM ES VERSION
2.0.X 2.1.0 2.3.5
2.1.X 2.1.0 2.3.5
2.2.X 2.1.0 2.3.5
2.3.X 2.3.5 5.x
2.4.X 2.3.5 5.x
2.5.X 2.3.5 6.x
3.0.X 5.x 6.x
3.1.X 5.x 6.x
3.2.X 5.x 6.x
3.3.X 5.x 6.x
4.0.X 6.8, 7 7.10.2
4.1.X 6.8, 7 7.10.2
4.2.X 6.8, 7 7.10.2
4.3.X 6.8, 7 7.10.2

MONGODB COMPATIBILITY

GRAYLOG VERSION MINIMUM MONGO VERSION MAXIMUM MONGO VERSION
2.0.X 2.4 3.2
2.1.X 2.4 3.2
2.2.X 2.4 3.4
2.3.X 2.4 3.4
2.4.X 2.4 3.4
2.5.X 2.4 3.4
3.0.X 3.6 3.6
3.1.X 3.6 4
3.2.X 3.6 4
3.3.X 3.6 4.2
4.0.X 3.6 4.2
4.1.X 3.6 4.4
4.2.X 3.6 4.4
4.3.X 3.6 4.4

Upgrading Elasticsearch

Warning

We caution you not to install or upgrade Elasticsearch to 7.11 and later! It is not supported. If you do so, it will break your instance!

Since Graylog 2.3 Elasticsearch 5.x is supported. This Graylog version supports Elasticsearch 2.x and 5.x. It is recommended to update Elasticsearch 2.x to the latest stable 5.x version, after you have Graylog 2.3 or later running. This Elasticsearch upgrade does not need to be made during the Graylog update.

When upgrading from Elasticsearch 2.x to Elasticsearch 5.x, make sure to read the upgrade guide provided by Elastic. The Graylog Elasticsearch configuration documentation contains information about the compatible Elasticsearch version. After the upgrade you must rotate the indices once manually.

Graylog 2.5 is the first Graylog version that supports Elasticsearch 6. The upgrade might need more attention and include the need to reindex your data if you are upgrading from versions before 5.x. Make sure to check our Elasticsearch 6 upgrade notes for this and other requirements.

When upgrading from Elasticsearch 5.x to Elasticsearch 6.x, make sure to read the upgrade guide provided by Elastic.

Graylog 4.0 is the first release that supports Elasticsearch 7, the upgrade is recommended as soon as possible but might need more attention and include the need to reindex your data. Make sure to check our Elasticsearch 7 upgrade notes for this and other requirements.

When upgrading from Elasticsearch 6.x to Elasticsearch 7.x, make sure to read the upgrade guide provided by Elastic. The Graylog Elasticsearch configuration documentation contains information about the compatible Elasticsearch version. After the upgrade you must rotate the indices once manually.

Note

A note about rolling upgrades for Elasticsearch: Elasticsearch supports rolling upgrades to avoid downtimes during upgrades. Graylog supports rolling upgrades with no restart of any Graylog node for Elasticsearch as long as they are performed between minor versions. For more information please see Rolling Upgrade Notes.


Was this article helpful?