# Downgrade beat version from v8 to v7

**URL:** <https://discuss.elastic.co/t/downgrade-beat-version-from-v8-to-v7/307045>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [June 13, 2022, 2:34pm UTC](https://discuss.elastic.co/t/downgrade-beat-version-from-v8-to-v7/307045 "2022-06-13T14:34:14Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![navin1093](https://avatars.discourse-cdn.com/v4/letter/n/e47c2d/32.png) [@navin1093](https://discuss.elastic.co/u/navin1093)\
**Post date:** [June 13, 2022, 2:34pm UTC](https://discuss.elastic.co/t/downgrade-beat-version-from-v8-to-v7/307045/1 "2022-06-13T14:34:14Z")

</div>

Hi, can I know is it possible to downgrade from version 8 to v 7.14. Earlier what I did was just backup existing filebeat at /etc/filebeat and install new filebeat v8 via rpm. After installing noticed something cause my cluster cant start. So what i did is I removed the index from Elasticsearch. How can I downgrade filebeat version since my Elasticsearch is version 7.

---

<div class="post-metadata">

**Author:** ![TiagoQueiroz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tiagoqueiroz/32/107061_2.png) [@TiagoQueiroz](https://discuss.elastic.co/u/TiagoQueiroz)\
**Post date:** [June 13, 2022, 3:06pm UTC](https://discuss.elastic.co/t/downgrade-beat-version-from-v8-to-v7/307045/2 "2022-06-13T15:06:44Z")

</div>

Hi @navin1093,

If I understood correctly, your installation of Filebeat v8 did not send any data on Elasticsearch, is that right?

There were quite some changes from v7.x to v8.x, like [the way data is stored in Elasticsearch](https://www.elastic.co/guide/en/beats/libbeat/current/breaking-changes-8.0.html#_beats_now_store_events_in_data_streams_instead_of_indices).

So if you don't need to keep the data the different versions sent, just completely uninstall v8 and then install v7.

---

<div class="post-metadata">

**Author:** ![navin1093](https://avatars.discourse-cdn.com/v4/letter/n/e47c2d/32.png) [@navin1093](https://discuss.elastic.co/u/navin1093)\
**Post date:** [June 13, 2022, 3:56pm UTC](https://discuss.elastic.co/t/downgrade-beat-version-from-v8-to-v7/307045/3 "2022-06-13T15:56:49Z")

</div>

I realized after install version 8 Filebeat, suddebly i cant bring up my Elasticsearch. I mean Elasticsearch master is up but not sure why can't connect to cluster. Therefore, i delete the idnex then can bring up. However, cant send logs. Ussually what is the steps to complete remove v8 and install v7. We jsut run the yum install?

In Kibana the error below was thrown earlier before delete the index

```auto
FATAL Error: Unable to complete saved object migrations for the [.kibana_task_manager] index. Please check the health of your Elasticsearch cluster and try again. Error: [cluster_block_exception]: index [.kibana_task_manager_7.14.0_001] blocked by: [TOO_MANY_REQUESTS/12/disk usage exceeded flood-stage watermark, index has read-only-allow-delete block];

```

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 14, 2022, 11:33pm UTC](https://discuss.elastic.co/t/downgrade-beat-version-from-v8-to-v7/307045/4 "2022-06-14T23:33:12Z")

</div>

> [@navin1093](#):
>
> `disk usage exceeded flood-stage watermark`

Looks like you ran out of disk space.

---

<div class="post-metadata">

**Author:** ![TiagoQueiroz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tiagoqueiroz/32/107061_2.png) [@TiagoQueiroz](https://discuss.elastic.co/u/TiagoQueiroz)\
**Post date:** [June 15, 2022, 9:53am UTC](https://discuss.elastic.co/t/downgrade-beat-version-from-v8-to-v7/307045/5 "2022-06-15T09:53:23Z")

</div>

> [@navin1093](#):
>
> We jsut run the yum install?

Yes, as you used your package manager to install it, just use it to uninstall Filebeat.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 13, 2022, 11:53am UTC](https://discuss.elastic.co/t/downgrade-beat-version-from-v8-to-v7/307045/6 "2022-07-13T11:53:41Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.