# Migrating from elastic 5.x to 6.0.0 with elastalert

**URL:** <https://discuss.elastic.co/t/migrating-from-elastic-5-x-to-6-0-0-with-elastalert/108702>\
**Category:** Elasticsearch\
**Created:** [November 22, 2017, 11:45am UTC](https://discuss.elastic.co/t/migrating-from-elastic-5-x-to-6-0-0-with-elastalert/108702 "2017-11-22T11:45:52Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Christian\_H](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_h/32/94049_2.png) [@Christian\_H](https://discuss.elastic.co/u/Christian_H)\
**Post date:** [November 22, 2017, 11:45am UTC](https://discuss.elastic.co/t/migrating-from-elastic-5-x-to-6-0-0-with-elastalert/108702/1 "2017-11-22T11:45:53Z")

</div>

Hello,

I want to migrate from ELK stack 5.4.3 (and 5.6.4) to 6.0.0 and keep on using elastalert.

There is a pull request which should make this possbile. However, I need to keep the old elastalert index from the 5.x version as it cannot be created in elasticsearch 6.x due to changes of the type mapping (only one doctype allowed for a new created index). Also see [https://github.com/Yelp/elastalert/pull/1426#issuecomment-345230535](https://github.com/Yelp/elastalert/pull/1426#issuecomment-345230535) and the comments above there for details.

My question is: How can I use the old index from elastic 5.x in elastic 6.0.0. I use docker for running the stack. Can I simply use the new elastic 6.0.0 container instead of the 5.x container, using the same volume like before and elastic will automatically migrate everything?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 20, 2017, 11:46am UTC](https://discuss.elastic.co/t/migrating-from-elastic-5-x-to-6-0-0-with-elastalert/108702/2 "2017-12-20T11:46:16Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
