ElasticSearch Errors after Upgrade to 6.6 - Graylog sends aggregation request

Graylog Central (peer support)
1

Hello Community,

I’ve upgraded our ES Cluster from 5.6 to 6.6 . Everything seems to work fine, messages are processed and searching works fast and smooth.

But when querying a certain Stream, which only queries one Index set (logs_*) I am getting the following Errors on my ES nodes:
image
image

But no Errors in Graylog. All other indexes work fine…

It looks to me like GL is telling ES to do an aggregation on the source field, which of course doesn’t work…

Any help is highly appreciated!!

2

Did you rotate your index after the upgrade manually once?

1 Like
3

Yes, I did :slight_smile:

4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.