Graylog won't start after upgrading from 3.0.0 to 4.0.0

[reimlima (Dummy)]

Yes, It can be related.

If the filesystem used by your elasticsearch cluster is running out of space it won’t write any message you receive.

You have to fix that in order to put it back online.

In graylog v4 you have to use Elasticsearch Curator to make it happens. There’s more about this issue in another thread:

Rotation of indexe using Curator

Hi, so, “allocation” is one type of actions Curator can do, it tells Curator to migrate your index from one node to another based on filters you define. See my configuration as an example: action: allocation description: "Apply shard allocation filtering rules to the hot log" options: key: box_type value: warm allocation_type: require wait_for_completion: True max_wait: 3600 timeout_override: continue_if_exception: False disable_action: …