# Upgrade ELK stack **URL:** \ **Category:** Elasticsearch\ **Tags:** slm-snapshot-lifecycle-management\ **Created:** [June 10, 2020, 11:14pm UTC](https://discuss.elastic.co/t/upgrade-elk-stack/236590 "2020-06-10T23:14:27Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![anjana1](https://avatars.discourse-cdn.com/v4/letter/a/22d042/32.png) [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Post date:** [June 10, 2020, 11:14pm UTC](https://discuss.elastic.co/t/upgrade-elk-stack/236590/1 "2020-06-10T23:14:28Z")
What is the right way to perform an upgrade of the stack to preserve the data .. I am trying to upgrade from 7.6 to 7.7.1 I am having challenges in upgrading without data loss. I went through the documentation and its confusing. I had a snapshot of my previous version. So do I do a restore after I upgrade? ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [June 11, 2020, 3:42am UTC](https://discuss.elastic.co/t/upgrade-elk-stack/236590/2 "2020-06-11T03:42:59Z")
You just need to follow the instructions here: [https://www.elastic.co/guide/en/elasticsearch/reference/current/rolling-upgrades.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/rolling-upgrades.html) ---
**Author:** ![anjana1](https://avatars.discourse-cdn.com/v4/letter/a/22d042/32.png) [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Post date:** [June 11, 2020, 6:35pm UTC](https://discuss.elastic.co/t/upgrade-elk-stack/236590/3 "2020-06-11T18:35:24Z")
I tried to do snapshot restore and then ended up closing all the indices. Now I cant reopen them as I am getting below error and I am stuck . Please advice on how to proceed {"message":"closed: [index\_closed\_exception] closed, with { index\_uuid="sTrUswmeTvOnvofMH1C9GA" & index=".kibana\_1" }","statusCode":400,"error":"Bad Request"} ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [June 11, 2020, 7:34pm UTC](https://discuss.elastic.co/t/upgrade-elk-stack/236590/4 "2020-06-11T19:34:27Z")
> [@anjana1](#): > > then ended up closing all the indices. Where did you see that in the documentation? ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [June 11, 2020, 7:35pm UTC](https://discuss.elastic.co/t/upgrade-elk-stack/236590/5 "2020-06-11T19:35:01Z")
> [@anjana1](#): > > Now I cant reopen them as I am getting below error and I am stuck . What is the command you are using? ---
**Author:** ![anjana1](https://avatars.discourse-cdn.com/v4/letter/a/22d042/32.png) [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Post date:** [June 11, 2020, 8:12pm UTC](https://discuss.elastic.co/t/upgrade-elk-stack/236590/6 "2020-06-11T20:12:18Z")
So we have this step 5. [Back up your data by taking a snapshot!] How do we put back the data we backed up. I believe that's a snapshot restore? ---
**Author:** ![anjana1](https://avatars.discourse-cdn.com/v4/letter/a/22d042/32.png) [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Post date:** [June 11, 2020, 8:16pm UTC](https://discuss.elastic.co/t/upgrade-elk-stack/236590/7 "2020-06-11T20:16:59Z")
POST /\_all/\_open and I tried to open index individually also ..all leads to same error ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [June 11, 2020, 9:06pm UTC](https://discuss.elastic.co/t/upgrade-elk-stack/236590/8 "2020-06-11T21:06:57Z")
It was not written to close the indices. Not sure why you can't reopen the indices. ---
**Author:** ![anjana1](https://avatars.discourse-cdn.com/v4/letter/a/22d042/32.png) [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Post date:** [June 11, 2020, 9:10pm UTC](https://discuss.elastic.co/t/upgrade-elk-stack/236590/9 "2020-06-11T21:10:21Z")
It was not letting me to go ahead with the restore unless I close or delete the index. But once I closed it I cannot perform any more operations. Could you pls pull any body else to this discussion who can address this? ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [June 11, 2020, 9:55pm UTC](https://discuss.elastic.co/t/upgrade-elk-stack/236590/10 "2020-06-11T21:55:01Z")
Was that written that you have to restore? ---
**Author:** ![anjana1](https://avatars.discourse-cdn.com/v4/letter/a/22d042/32.png) [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Post date:** [June 11, 2020, 9:56pm UTC](https://discuss.elastic.co/t/upgrade-elk-stack/236590/11 "2020-06-11T21:56:35Z")
No its not written there but after I did an upgrade I don't see my data in there ..So that's why I did a restore ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [June 11, 2020, 10:19pm UTC](https://discuss.elastic.co/t/upgrade-elk-stack/236590/12 "2020-06-11T22:19:17Z")
I'm confused now. What exactly did you do? What is the output of: ```auto GET / GET /_cat/nodes?v GET /_cat/health?v GET /_cat/indices?v ``` If some outputs are too big, please share them on [gist.github.com](http://gist.github.com) and link them here. ---
**Author:** ![anjana1](https://avatars.discourse-cdn.com/v4/letter/a/22d042/32.png) [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Post date:** [June 11, 2020, 10:35pm UTC](https://discuss.elastic.co/t/upgrade-elk-stack/236590/13 "2020-06-11T22:35:25Z")
> [@dadoonet](#): > > `GET /` I am unabel to start Kibana now..error says `[index_closed_exception] closed, with { index_uuid="sTrUswmeTvOnvofMH1C9GA" & index=".kibana_1" } :: {"path":"/.kibana/_count","query":{},"body":"{\"query\":{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"exists\":{\"field\":\"graph-workspace\"}},{\"bool\":{\"must_not\":{\"term\":{\"migrationVersion.graph-workspace\":\"7.0.0\"}}}}]}},{\"bool\":{\"must\":[{\"exists\":{\"field\":\"space\"}},{\"bool\":{\"must_not\":{\"term\":{\"migrationVersion.space\":\"6.6.0\"}}}}]}},{\"bool\":{\"must\":[{\"exists\":{\"field\":\"map\"}},{\"bool\":{\"must_not\":{\"term\":{\"migrationVersion.map\":\"7.6.0\"}}}}]}},{\"bool\":{\"must\":[{\"exists\":{\"field\":\"canvas-workpad\"}},{\"bool\":{\"must_not\":{\"term\":{\"migrationVersion.canvas-workpad\":\"7.0.0\"}}}}]}},{\"bool\":{\"must\":[{\"exists\":{\"field\":\"task\"}},{\"bool\":{\"must_not\":{\"term\":{\"migrationVersion.task\":\"7.6.0\"}}}}]}},{\"bool\":{\"must\":[{\"exists\":{\"field\":\"index-pattern\"}},{\"bool\":{\"must_not\":{\"term\":{\"migrationVersion.index-pattern\":\"7.6.0\"}}}}]}},{\"bool\":{\"must\":[{\"exists\":{\"field\":\"visualization\"}},{\"bool\":{\"must_not\":{\"term\":{\"migrationVersion.visualization\":\"7.4.2\"}}}}]}},{\"bool\":{\"must\":[{\"exists\":{\"field\":\"dashboard\"}},{\"bool\":{\"must_not\":{\"term\":{\"migrationVersion.dashboard\":\"7.3.0\"}}}}]}},{\"bool\":{\"must\":[{\"exists\":{\"field\":\"search\"}},{\"bool\":{\"must_not\":{\"term\":{\"migrationVersion.search\":\"7.4.0\"}}}}]}}]}}}","statusCode":400,"response":"{\"error\":{\"root_cause\":[{\"type\":\"index_closed_exception\",\"reason\":\"closed\",\"index_uuid\":\"sTrUswmeTvOnvofMH1C9GA\",\"index\":\".kibana_1\"}],\"type\":\"index_closed_exception\",\"reason\":\"closed\",\"index_uuid\":\"sTrUswmeTvOnvofMH1C9GA\",\"index\":\".kibana_1\"},\"status\":400}"}` ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [June 12, 2020, 2:02am UTC](https://discuss.elastic.co/t/upgrade-elk-stack/236590/14 "2020-06-12T02:02:49Z")
Run it with `curl`. Please format your code, logs or configuration files using `` icon as explained in [this guide](https://discuss.elastic.co/t/about-the-elasticsearch-category/21) and not the citation button. It will make your post more readable. Or use markdown style like: ```` ``` CODE ``` ```` This is the icon to use if you are not using markdown format: ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/e/7e6e239431ec2d71cbf1beef741f2e93e7cc762c.jpg) There's a live preview panel for exactly this reasons. Lots of people read these forums, and many of them will simply skip over a post that is difficult to read, because it's just too large an investment of their time to try and follow a wall of badly formatted text. If your goal is to get an answer to your questions, it's in your interest to make it as easy to read and understand as possible. ---
**Author:** ![anjana1](https://avatars.discourse-cdn.com/v4/letter/a/22d042/32.png) [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Post date:** [June 12, 2020, 2:41am UTC](https://discuss.elastic.co/t/upgrade-elk-stack/236590/15 "2020-06-12T02:41:16Z")
No I am not able to even launch kibana . So I cannot access the dev tools section. Whatever I posted was not code .. its a snippet from logs. That was an error on kibana startup logs `[index_closed_exception] closed, with { index_uuid="sTrUswmeTvOnvofMH1C9GA" & index=".kibana_1" }` ---
**Author:** ![anjana1](https://avatars.discourse-cdn.com/v4/letter/a/22d042/32.png) [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Post date:** [June 12, 2020, 2:45am UTC](https://discuss.elastic.co/t/upgrade-elk-stack/236590/16 "2020-06-12T02:45:37Z")
I upgraded my ELK from 7.1 to 7.7 by following the documentation. But where did my data from previous version go. ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [June 12, 2020, 3:29am UTC](https://discuss.elastic.co/t/upgrade-elk-stack/236590/17 "2020-06-12T03:29:21Z")
It does not prevent you from running the curl commands I asked you to run, does it? ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [June 12, 2020, 3:31am UTC](https://discuss.elastic.co/t/upgrade-elk-stack/236590/18 "2020-06-12T03:31:50Z")
> [@anjana1](#): > > I upgraded my ELK from 7.1 to 7.7 by following the documentation. I'm sorry but you did not follow the documentation as I said earlier. It was not written to close indices, restore snapshots... > [@anjana1](#): > > But where did my data from previous version go. Hard to know as we don't know exactly what you did. The exact steps. Best chance is that data is still in the `data` dir. ---
**Author:** ![anjana1](https://avatars.discourse-cdn.com/v4/letter/a/22d042/32.png) [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Post date:** [June 12, 2020, 5:21pm UTC](https://discuss.elastic.co/t/upgrade-elk-stack/236590/19 "2020-06-12T17:21:28Z")
curl worked thanks ---
**Author:** ![anjana1](https://avatars.discourse-cdn.com/v4/letter/a/22d042/32.png) [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Post date:** [June 12, 2020, 6:21pm UTC](https://discuss.elastic.co/t/upgrade-elk-stack/236590/20 "2020-06-12T18:21:51Z")
So when we do an upgrade hoe can we move the data folder from older version to newer version? Just copy and paste the folder to new version .will that work? [Next page](https://discuss.elastic.co/t/upgrade-elk-stack/236590.md?page=2)