ElasticSearch Errors after Upgrade to 6.6 - Graylog sends aggregation request

Hello Community,

I’ve upgraded our ES Cluster from 5.6 to 6.6 . Everything seems to work fine, messages are processed and searching works fast and smooth.

But when querying a certain Stream, which only queries one Index set (logs_*) I am getting the following Errors on my ES nodes:

But no Errors in Graylog. All other indexes work fine…

It looks to me like GL is telling ES to do an aggregation on the source field, which of course doesn’t work…

Any help is highly appreciated!!

Did you rotate your index after the upgrade manually once?

1 Like

Yes, I did :slight_smile:

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.