# Upgrade ES to 6.8 and Graylog to 4.0

**URL:** <https://discuss.elastic.co/t/upgrade-es-to-6-8-and-graylog-to-4-0/286586>\
**Category:** Elasticsearch\
**Created:** [October 13, 2021, 7:48am UTC](https://discuss.elastic.co/t/upgrade-es-to-6-8-and-graylog-to-4-0/286586 "2021-10-13T07:48:46Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![vivir](https://avatars.discourse-cdn.com/v4/letter/v/c57346/32.png) [@vivir](https://discuss.elastic.co/u/vivir)\
**Post date:** [October 13, 2021, 7:48am UTC](https://discuss.elastic.co/t/upgrade-es-to-6-8-and-graylog-to-4-0/286586/1 "2021-10-13T07:48:46Z")

</div>

I’m currently using graylog 3.3 and I’d like to upgrade to version 4.0.  
It looks like I need to upgrade Elasticsearch first ( currently using version 5.6).  
I’ve done research online but I can’t seem to find how to re-index my indices. Any help is appreciated.

 ![2021-10-12 09_59_40-Graylog - Index Set - Default index set](https://us1.discourse-cdn.com/elastic/original/3X/c/7/c771080aa7ddf57d1d94d98a5f330f3a66d6a708.png)

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 13, 2021, 7:51am UTC](https://discuss.elastic.co/t/upgrade-es-to-6-8-and-graylog-to-4-0/286586/2 "2021-10-13T07:51:24Z")

</div>

Welcome to our community! 😃

You might be better off running up a newer cluster and then doing a remote reindex into it. Is that possible?

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [October 13, 2021, 7:53am UTC](https://discuss.elastic.co/t/upgrade-es-to-6-8-and-graylog-to-4-0/286586/3 "2021-10-13T07:53:08Z")

</div>

If you upgrade from Elasticsearch 5.6 to 6.8 and do not have indices created in earlier versions you should not need to reindex your data.

---

<div class="post-metadata">

**Author:** ![vivir](https://avatars.discourse-cdn.com/v4/letter/v/c57346/32.png) [@vivir](https://discuss.elastic.co/u/vivir)\
**Post date:** [October 13, 2021, 8:42am UTC](https://discuss.elastic.co/t/upgrade-es-to-6-8-and-graylog-to-4-0/286586/5 "2021-10-13T08:42:42Z")

</div>

Thank for your reply, this is my problem I've version 2.4 indices.

_**java.lang.IllegalStateException: The index [[graylog\_644/cp172I2ERtexC-UVsEEKsg]] was created with version [2.4.6] but the minimum compatible version is [5.0.0]. It should be re-indexed in Elasticsearch 5.x before upgrading to 6.8.19**_

---

<div class="post-metadata">

**Author:** ![vivir](https://avatars.discourse-cdn.com/v4/letter/v/c57346/32.png) [@vivir](https://discuss.elastic.co/u/vivir)\
**Post date:** [October 13, 2021, 8:43am UTC](https://discuss.elastic.co/t/upgrade-es-to-6-8-and-graylog-to-4-0/286586/6 "2021-10-13T08:43:30Z")

</div>

Thank for your reply, this is my problem I've version 2.4 indices.

_**java.lang.IllegalStateException: The index [[graylog\_644/cp172I2ERtexC-UVsEEKsg]] was created with version [2.4.6] but the minimum compatible version is [5.0.0]. It should be re-indexed in Elasticsearch 5.x before upgrading to 6.8.19.**_

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [October 13, 2021, 9:03am UTC](https://discuss.elastic.co/t/upgrade-es-to-6-8-and-graylog-to-4-0/286586/7 "2021-10-13T09:03:26Z")

</div>

Then you need to reindex them in the current version prior to upgrading. How to best do that probably depends on GrayLog, which I am not familiar with.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 10, 2021, 9:04am UTC](https://discuss.elastic.co/t/upgrade-es-to-6-8-and-graylog-to-4-0/286586/8 "2021-11-10T09:04:18Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
