# Graylog & Opensearch error

**URL:** <https://community.graylog.org/t/graylog-opensearch-error/27322>\
**Category:** Graylog Central (peer support)\
**Tags:** elastic\
**Created:** [January 17, 2023, 1:53pm UTC](https://community.graylog.org/t/graylog-opensearch-error/27322 "2023-01-17T13:53:00Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![richardt](https://avatars.discourse-cdn.com/v4/letter/r/9f8e36/32.png) [@richardt](https://community.graylog.org/u/richardt)\
**Post date:** [January 17, 2023, 1:53pm UTC](https://community.graylog.org/t/graylog-opensearch-error/27322/1 "2023-01-17T13:53:00Z")

</div>

I am attempting to migrate from Elasticserach 6.8 to Opensearch 1.3. When starting Graylog I get this error:

```auto

[2023-01-12T11:45:59,391][ERROR][o.o.b.Bootstrap] [graylog-es1] Exception
java.lang.IllegalStateException: The index [[.tasks/5gaAnPefT6S9oBzrfGKQsw]] was created with version [5.6.16] but the minimum compatible version is [6.0.0-beta1]. It should be re-indexed in OpenSearch 6.x before upgrading to 1.3.7.

```

Using this curl command I found this line in the output which seems to show which index is the issue.

```auto
curl -X GET "<ip>:9200/*/_settings"

".tasks":{"settings":{"index":{"creation_date_string":"2021-02-10T10:13:06.078Z","number_of_shards":"1","auto_expand_replicas":"0-1","provided_name":".tasks","creation_date":"1612951986078","priority":"2147483647","number_of_replicas":"1","uuid":"5gaAnPefT6S9oBzrfGKQsw","version":{"upgraded":"6082399","created_string":"5.6.16","upgraded_string":"6.8.23","created":"5061699"}}}}

```

CentOS 7  
Graylog 4.3.9

Unfortunately I know little about Elasticsearch / Opensearch, so I’m not sure what the options are. My google skills have let me down so far.

Thanks

---

<div class="post-metadata">

**Author:** ![dscryber](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/dscryber/32/14178_2.png) [@dscryber](https://community.graylog.org/u/dscryber)\
**Post date:** [January 17, 2023, 5:27pm UTC](https://community.graylog.org/t/graylog-opensearch-error/27322/2 "2023-01-17T17:27:02Z")

</div>

Hey, Richard, I wanted to reach out to you with some observations from the documentation. My response is based solely on the documentation. We have several other Graylog members who can response here with experience, so I’m sure they’re contribute, too.

Your error message indicates that the index ‘.tasks/5gaAnPefT6S9oBzrfGKQsw’ was created with version 5.6.16 of Elasticsearch, but the minimum compatible version for your current version of Graylog (4.3.9) is 6.0.0-beta1. So, to resolve this issue, you will need to re-index the ‘.tasks’ index in OpenSearch 6.x before upgrading to version 1.3.7 of OpenSearch.

This can be done by using the re-index API of Elasticsearch. You can also use a tool such as Elasticsearch-dump to backup and restore the index.

Also, please note that migrating from Elasticsearch 6.8 to OpenSearch 1.3 can be a major upgrade, so please consult the official documentation and seek help from our experienced Elasticsearch/OpenSearch users in the community. Good luck and thanks for asking!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [January 31, 2023, 5:27pm UTC](https://community.graylog.org/t/graylog-opensearch-error/27322/3 "2023-01-31T17:27:05Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.