# Upgrade to 9.x - logstash-filter-elastic\_integration **URL:** \ **Category:** Elasticsearch\ **Created:** [February 13, 2026, 9:07am UTC](https://discuss.elastic.co/t/upgrade-to-9-x-logstash-filter-elastic-integration/385035 "2026-02-13T09:07:46Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![CD9820](https://avatars.discourse-cdn.com/v4/letter/c/e9c0ed/32.png) [@CD9820](https://discuss.elastic.co/u/CD9820)\ **Post date:** [February 13, 2026, 9:07am UTC](https://discuss.elastic.co/t/upgrade-to-9-x-logstash-filter-elastic-integration/385035/1 "2026-02-13T09:07:46Z")
Hello, we are planning our upgrade from 8.19.x to 9.2.x For some ingestflows we use the logstash-filter-elastic\_integration In the upgrade documentation Elastic recommends upgrading Elasticsearch first, followed by Kibana and finally logstash, beats, agents, ... The upgrade documenation also mentions the plugin for elastic\_integration requires special attention as mentioned in: [https://www.elastic.co/docs/reference/logstash/upgrading-logstash#upgrading-when-elastic\_integration-in-pipeline](https://www.elastic.co/docs/reference/logstash/upgrading-logstash#upgrading-when-elastic_integration-in-pipeline) Will the logging of data that is ingested with Logstash using this plugin be interrupted during the upgrade or is the 8.19.x plugin fully compatible with version 9.x? Best regards Christophe ---
**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Post date:** [February 13, 2026, 12:11pm UTC](https://discuss.elastic.co/t/upgrade-to-9-x-logstash-filter-elastic-integration/385035/2 "2026-02-13T12:11:51Z")
> [@CD9820](#): > > Will the logging of data that is ingested with Logstash using this plugin be interrupted during the upgrade or is the 8.19.x plugin fully compatible with version 9.x? You need to follow this [recommendation](https://www.elastic.co/docs/reference/logstash/plugins/plugins-filters-elastic_integration#plugins-filters-elastic_integration-requirements), when upgrading the stack you need to upgrade Logstash before you upgrade Kibana. You cannot have Logstash version 8.19 and Elasticsearch + Kibana on version 9.X if you are using the `elastic_integration` filter. I had this issue recently, it will break your ingestion, Logstash will not be able to load the Ingest Pipeline and as a fallback the parse will be done in Elasticsearch, any enrichment you have later in Logstash will not work. So, as soon as you upgrade Elasticsearch, start upgrading your Logstash to avoid more issues. ---
**Author:** ![CD9820](https://avatars.discourse-cdn.com/v4/letter/c/e9c0ed/32.png) [@CD9820](https://discuss.elastic.co/u/CD9820)\ **Post date:** [February 13, 2026, 1:51pm UTC](https://discuss.elastic.co/t/upgrade-to-9-x-logstash-filter-elastic-integration/385035/3 "2026-02-13T13:51:32Z")
Thank you for the feedback. We use 8 nodes that have the ingest role. Could we upgrade Elasticsearch on those four nodes, then upgrade logstash and finally upgrade Elasticsearch on the last four nodes? ---
**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Post date:** [February 13, 2026, 2:01pm UTC](https://discuss.elastic.co/t/upgrade-to-9-x-logstash-filter-elastic-integration/385035/4 "2026-02-13T14:01:14Z")
I'm not sure, the only recommendation in the documentation is to upgrade Logstash **before** you upgrade Kibana, there is nothing related to the order. I would recommend that you upgrade your Elasticsearch nodes, then your Logstash instances and then Kibana. The order of the Elasticsearch nodes needs to be the one in the documentation, with the masters being upgraded last. If you have dedicated ingest nodes you may start with them. ---
**Author:** ![CD9820](https://avatars.discourse-cdn.com/v4/letter/c/e9c0ed/32.png) [@CD9820](https://discuss.elastic.co/u/CD9820)\ **Post date:** [February 25, 2026, 1:59pm UTC](https://discuss.elastic.co/t/upgrade-to-9-x-logstash-filter-elastic-integration/385035/5 "2026-02-25T13:59:41Z")
I also read this: [https://www.elastic.co/docs/release-notes/logstash#logstash-plugin-9.2.0-changes](https://www.elastic.co/docs/release-notes/logstash#logstash-plugin-9.2.0-changes) "Utilizes Elasticsearch interfaces via Elasticsearch logstash-bridge #336" Is it correct that this logstash-bridge feature enables logstash 9.2.x to be backwards compatible with elasticsearch 8.19.x? If yes, I should upgrade logstash before I upgrade elasticsearch and kibana (we are upgrading from 8.19.11 to 9.2.5). Does anyone has experience with this approach? ---
**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Post date:** [February 25, 2026, 2:24pm UTC](https://discuss.elastic.co/t/upgrade-to-9-x-logstash-filter-elastic-integration/385035/6 "2026-02-25T14:24:41Z")
I have no idea what this `logstash-bridge` is, never heard about it and I'm not sure what it does, it seems to be something internal. As I mentioned, if you use `logstash-filter-elastic_integration` the only recomendation is to upgrade Logstash before Elasticsearch. In my case I didn't do that and when Logstash tried to refresh the ingest pipeline it was using, it broke the ingestion and the events started being processed in Elasticsearch again. Upgrading Logstash solved the issue. The filter will check Elasticsearch every minute to see if there is any changes to the pipeline, if this check fails it will use the cached information until it expires in 24 hours. This was my issue, version 8.19 was not able to check the changes because Elasticsearch was on 9.2, than when the cache expired it stopped processing logs in Logstash and started processing in Elastiscsearch again. Since this is an enterprise feature you may get a better answer opening a support ticket, but they will also direct you to the same doc I mentioned.