Hi Jimmy, you have to stop processing on all Graylog nodes (so that messages are being written into the disk journal but not into Elasticsearch), upgrade your Elasticsearch cluster, stop all Graylog nodes, upgrade all Graylog nodes, then start all Graylog nodes again.
for more details please refer to the release blog posts and upgrade notes for Graylog 2.0.x and Elasticsearch 2.x: - http://docs.graylog.org/en/2.0/pages/upgrade.html - https://www.graylog.org/blog/55-announcing-graylog-v2-0-ga - https://www.graylog.org/blog/56-graylog-v2-0-1-released - https://www.graylog.org/blog/57-graylog-v2-0-2-released - https://www.graylog.org/blog/58-graylog-v2-0-3-released - https://www.elastic.co/blog/key-point-to-be-aware-of-when-upgrading-from-elasticsearch-1-to-2 - https://www.elastic.co/guide/en/elasticsearch/reference/2.3/setup-upgrade.html Cheers, Jochen On Wednesday, 17 August 2016 01:06:43 UTC+2, Jimmy Chen wrote: > > We currently have a cluster of ES 1.7 nodes and Graylog 1.3 servers, we > are looking to upgrade all of it to the latest version while retaining all > the data. I have looked at the documentations for upgrading both. Although > the ElasticSearch 2.3 upgrade seems pretty straight forward, it looks like > it will require a whole cluster restarted. While at the same time, it will > no longer be compatible with Graylog 1.3 after the upgrade. Similarly, if I > upgrade/rebuild the Graylog servers with version 2.0, I am not sure if the > indices in the ES cluster will be compatible at that point. So basically, I > am not clear on how to tackle this. Can anyone provide some insight on > what's the best way to do this? > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/9a7691ec-aa3d-47f7-9d8c-863bea07969c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
