Unsure on upgrading from Graylog 4.2.12 to Graylog 4.3.X

Our question

We are running Graylog Open and Enterprise in a reasonable standard singel node setup and want to upgrade to the 4.3.x branch. Due to the documentation we are little unsure what to do to upgrade, and if we can jump straight tot the latest 4.3 version.

installation documentation still points to 4.2:

sudo rpm -Uvh https://packages.graylog2.org/repo/packages/graylog-4.2-repository_latest.rpmsudo yum install graylog-server graylog-enterprise-plugins graylog-integrations-plugins graylog-enterprise-integrations-plugins

And we think that we should do something here to upgrade the pointer to the repo as mentioned here:
Operating System Packages - Installing Graylog
And the first check if the updates are visible (yum check-update)

As we understand some changes need to be made to the server.conf file as mentioned here:
Upgrading to Graylog 4.3.x - Upgrading Graylog

Is changing the repo’s, updating to the latest 4.3.x and making the small adjustments to server.conf adequate for us, we do not want to harm our environment :wink:

our environment:

  • OS Information: Rocky Linux 8

  • Package Version:Graylog 4.2.12 / Elasticsearch 7.10.2

Any advice would be appreciated.

our unsureness arises due to the information here, pointing to multiple directions
Upgrading to Graylog 4.3.x - Upgrading Graylog)


I have upgraded my environment (Ubuntu) using DEB packages and APT from 4.2 to 4.3 with minor issues which got progressively resolved in the 4.3.X minor releases. As far as I remember I did not have to change configs in server.conf.

One thing to note : the pre-flight checks, introduced in 4.3, might stop your Graylog service from running. Pre-flight checks and other notable changes are documented in the release notes.

Overall I would recommend upgrading, but cannot guarantee it would be flawless for your environment.

1 Like

Adding on to @H2Cyber ,

If you using GeoIP the field names have change.

1 Like

Indeed, but the changes in geo field names were rolled back in 4.3.5. So there should be no change or impact with this regard for those going from 4.2. to 4.3.5.

1 Like

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.