# Upgrade ElasticStack from 2.X to 5.4.3-1 not showing old logs

**URL:** <https://discuss.elastic.co/t/upgrade-elasticstack-from-2-x-to-5-4-3-1-not-showing-old-logs/92320>\
**Category:** Elasticsearch\
**Created:** [July 7, 2017, 6:47pm UTC](https://discuss.elastic.co/t/upgrade-elasticstack-from-2-x-to-5-4-3-1-not-showing-old-logs/92320 "2017-07-07T18:47:07Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![talis](https://avatars.discourse-cdn.com/v4/letter/t/9fc348/32.png) [@talis](https://discuss.elastic.co/u/talis)\
**Post date:** [July 7, 2017, 6:47pm UTC](https://discuss.elastic.co/t/upgrade-elasticstack-from-2-x-to-5-4-3-1-not-showing-old-logs/92320/1 "2017-07-07T18:47:07Z")

</div>

EDIT: looking through the documentation some more, it looks like I should have used the migration tool to reindex when I was still in verison 2.4.5. Is there any way to do this after already upgrading?  
The migration helper says it will run on Elasticsearch versions 2.3.x and 2.4.x only.

I just upgraded to the newest version of Elastic Stack. New data is coming in from all my machines but now I do not have access to any of the data from before the upgrade.

The old versions I upgraded from were:  
Elasticsearch 2.4.5   
Kibana 4.5.4   
Logstash 2.3.4

and they are now all at 5.4.3-1.  
I read through the breaking changes but didn't see any instructions for importing data from older versions.  
Is it possible to integrate the old data into the new version of Elastic Stack?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [July 8, 2017, 12:54am UTC](https://discuss.elastic.co/t/upgrade-elasticstack-from-2-x-to-5-4-3-1-not-showing-old-logs/92320/2 "2017-07-08T00:54:36Z")

</div>

Is there anything in the logs that might explain what is happening?

---

<div class="post-metadata">

**Author:** ![talis](https://avatars.discourse-cdn.com/v4/letter/t/9fc348/32.png) [@talis](https://discuss.elastic.co/u/talis)\
**Post date:** [July 10, 2017, 5:04pm UTC](https://discuss.elastic.co/t/upgrade-elasticstack-from-2-x-to-5-4-3-1-not-showing-old-logs/92320/3 "2017-07-10T17:04:53Z")

</div>

It appears to have resolved itself... I can now see all the past logs in Kibana.

EDIT: It appears Kibana version 5.4.3 cannot access the old logs. Updating to Kibana 5.5.0 allows me to see old logs, but Wazuh does not have a compatible plugin for Kibana 5.5.0

EDIT2: It looks like wazuh is working on getting their plugin working with 5.5.0 within the next day or two.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 7, 2017, 5:05pm UTC](https://discuss.elastic.co/t/upgrade-elasticstack-from-2-x-to-5-4-3-1-not-showing-old-logs/92320/4 "2017-08-07T17:05:15Z")

</div>

Closed on August 7, 2017, 5:05pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.