# Re-indexing data for graylog & elasticsearch upgrade

**URL:** <https://community.graylog.org/t/re-indexing-data-for-graylog-elasticsearch-upgrade/23548>\
**Category:** Graylog Central (peer support)\
**Tags:** elastic\
**Created:** [April 25, 2022, 9:21am UTC](https://community.graylog.org/t/re-indexing-data-for-graylog-elasticsearch-upgrade/23548 "2022-04-25T09:21:31Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![samurai29](https://avatars.discourse-cdn.com/v4/letter/s/c6cbf5/32.png) [@samurai29](https://community.graylog.org/u/samurai29)\
**Post date:** [April 25, 2022, 9:21am UTC](https://community.graylog.org/t/re-indexing-data-for-graylog-elasticsearch-upgrade/23548/1 "2022-04-25T09:21:31Z")

</div>

Hello There

**1. Describe your incident:**  
We are receiving below error while upgradding ES from 6.8 to 7.16

The index [graylog\_1082/WFeFroGmSUKbClpNJiuJdw] was created with version [5.6.5] but the minimum compatible version is [6.0.0-beta1]. It should be re-indexed in Elasticsearch 6.x before upgrading to 7.16.1.

**2. Describe your environment:**

- OS Information:  
Debian linux (docker container)

- Package Version:  
Graylog 4.2.5  
ES : 7.16.1  
Mongo : 4.4.12

- Service logs, configurations, and environment variables:  
The index [graylog\_1082/WFeFroGmSUKbClpNJiuJdw] was created with version [5.6.5] but the minimum compatible version is [6.0.0-beta1]. It should be re-indexed in Elasticsearch 6.x before upgrading to 7.16.1.

**3. What steps have you already taken to try and solve the problem?**  
remove the old index and start the ES

**4. How can the community help?**  
After reasearch I understood data should be indexed with one higher before upgrading, so I want to know below things

1. is there any scrip or API call we can use to re-index listed old index to new version

2. also what is the impact if we remove old index will it break previous configuration.

Please help to understand above to two query so that we can start working on solution.

Regards,  
SAM

**Helpful Posting Tips:** [Tips for Posting Questions that Get Answers](https://community.graylog.org/t/tips-for-posting-questions-that-get-answers/21828) [Hold down CTRL and link on link to open tips documents in a separate tab]

---

<div class="post-metadata">

**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\
**Post date:** [April 25, 2022, 10:10pm UTC](https://community.graylog.org/t/re-indexing-data-for-graylog-elasticsearch-upgrade/23548/2 "2022-04-25T22:10:39Z")

</div>

Hello,

> [@samurai29](#):
>
> is there any scrip or API call we can use to re-index listed old index to new version

Not that I know of, sorry.

> [@samurai29](#):
>
> or API call we can use to re-index listed old index to new version

Navigate to System/Node Click on API browser, you should see this.

 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/f/f6d691961d0bc900ff5790473f285bdeb9981670.png)

> [@samurai29](#):
>
> also what is the impact if we remove old index will it break previous configuration.

Here are a couple suggestions on this topic

1.Please take a look [here](https://docs.graylog.org/docs/installing#:~:text=Manual%20Setup-,SYSTEM%20REQUIREMENTS,-Warning) about elasticsearch compatible versions.

2.I’m not sure if you have seen this [Graylog How to Upgrade Elasticsearch](https://docs.graylog.org/docs/elasticsearch-6)

3.This also helped, not sure if you seen this,  
[https://docs.graylog.org/v1/docs/elasticsearch-reindexing](https://docs.graylog.org/v1/docs/elasticsearch-reindexing)

When you see this error/warning

> [@samurai29](#):
>
> It should be re-indexed in Elasticsearch 6.x before upgrading to 7.16.1.

What I did was the following to avoid those errors/warnings.

- Insure elasticsearch is at that latest version of 5.x.x.

- Upgrade to elasticsearch 6.0 and reindex (i.e. You can manually rotate you indices from Graylog Web UI)  
 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/c/cabb9507df60c20b6605de470bbc8094d73a4b33.png)

- Once completed/finished, upgrade elasticsearch to the latest version of 6.8.x .

- After that is completed, Upgrade Elasticsearch to 7.0. Once the upgrade is completed, rotate the indices as stated from above.

- Should be good if this was the path you followed.

Hope that helps

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [May 9, 2022, 10:11pm UTC](https://community.graylog.org/t/re-indexing-data-for-graylog-elasticsearch-upgrade/23548/3 "2022-05-09T22:11:08Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
