This section of the Graylog documentation provides guidance on upgrading to recent versions of Graylog. If you are upgrading from an older version, be sure to begin by reading the Upgrade Path documentation to guide you through an incremental upgrade process.

Upgrade Guides by OS

When upgrading from a previous version of Graylog, follow the previously used installation method (e.g. operating system package) using the new version numbers.

Upgrade Notes by Version

The following upgrade notes should be read carefully before you start the upgrade process. Breaking changes and dependency upgrades are documented in those upgrade notes.

Hint: The upgrade notes are always written as if you are upgrading from the last stable release before.

Upgrading Graylog Originally Installed from Package

If the current installation was completed using a package manager (ex. yum, apt), update the repository package to the target version and use the system tools to upgrade the package. For .rpm based systems see this update guide. For .deb based systems see this update guide.

Version Compatibility

Prior to upgrading, consult the following table for compatibility with supported versions of Elasticsearch/OpenSearch and MongoDB. (Documentation regarding previous versions of Graylog may be found in the Legacy Documentation.)

Graylog Version Minimum MongoDB Version Maximum MongoDB Version Minimum Elasticsearch Version Maximum Elasticsearch Version Minimum OpenSearch Version Maximum OpenSearch Version
3.3.x 3.6 4.2 5.0 6.x Not Supported Not Supported
4.0.x 3.6 4.2 6.8 or 7.0 7.1 Not Supported Not Supported
4.1.x 3.6 4.4 6.8 or 7.0 7.1 Not Supported Not Supported
4.2.x 3.6 4.4 6.8 or 7.0 7.10.2 Not Supported Not Supported
4.3.x 3.6 5.0 6.8 or 7.0 7.10.2 1.1.x (or 1.3.x for Graylog Security) 1.3.x

5.0.x

5.0

6.x

7.10.2

7.10.2

1.1.x (or 1.3.x for Graylog Security)

2.13.x

Notes on Upgrading Elasticsearch

Warning: We caution you not to install or upgrade Elasticsearch to 7.11+ or OpenSearch 2.14+! It is not supported. If you do so, it will break your instance!

  • Since Graylog 2.3 Elasticsearch 5.x is supported. It is recommended to update Elasticsearch 2.x to the latest stable 5.x version after you have Graylog 2.3 or later running. This Elasticsearch upgrade does not need to be made during the Graylog update.

  • When upgrading from Elasticsearch 2.x to Elasticsearch 5.x, make sure to read the upgrade guide provided by Elastic. The Graylog Elasticsearch configuration documentation contains information about the compatible Elasticsearch version. After the upgrade you must rotate the indices once manually.

  • Graylog 2.5 is the first Graylog version that supports Elasticsearch 6. The upgrade might need more attention and include the need to reindex your data if you are upgrading from versions before 5.x. Make sure to check our Elasticsearch 6 upgrade notes for this and other requirements.

  • When upgrading from Elasticsearch 5.x to Elasticsearch 6.x, make sure to read the upgrade guide provided by Elastic.

  • Graylog 4.0 is the first release that supports Elasticsearch 7, the upgrade is recommended as soon as possible but might need more attention and include the need to reindex your data. Make sure to check our Elasticsearch 7 upgrade notes for this and other requirements.

  • When upgrading from Elasticsearch 6.x to Elasticsearch 7.x, make sure to read the upgrade guide provided by Elastic. The Graylog Elasticsearch configuration documentation contains information about the compatible Elasticsearch version. After the upgrade you must rotate the indices once manually.

Hint: A note about rolling upgrades for Elasticsearch: Elasticsearch supports rolling upgrades to avoid downtime during upgrades. Graylog supports rolling upgrades with no restart of any Graylog node for Elasticsearch as long as they are performed between minor versions. For more information please see Rolling Upgrade Notes.

Notes on Upgrading OpenSearch

If you are upgrading OpenSearch, we recommend that you refer to the official documentation on the upgrade process. If you are upgrading to Graylog 5.x, then we also provide an upgrade guide specific to upgrading to OpenSearch 2.x.