We are running Graylog Open and Enterprise in a reasonable standard singel node setup and want to upgrade to the 4.3.x branch. Due to the documentation we are little unsure what to do to upgrade, and if we can jump straight tot the latest 4.3 version.
And we think that we should do something here to upgrade the pointer to the repo as mentioned here: Operating System Packages - Installing Graylog
And the first check if the updates are visible (yum check-update)
Is changing the repoβs, updating to the latest 4.3.x and making the small adjustments to server.conf adequate for us, we do not want to harm our environment
I have upgraded my environment (Ubuntu) using DEB packages and APT from 4.2 to 4.3 with minor issues which got progressively resolved in the 4.3.X minor releases. As far as I remember I did not have to change configs in server.conf.
One thing to note : the pre-flight checks, introduced in 4.3, might stop your Graylog service from running. Pre-flight checks and other notable changes are documented in the release notes.
Overall I would recommend upgrading, but cannot guarantee it would be flawless for your environment.
Indeed, but the changes in geo field names were rolled back in 4.3.5. So there should be no change or impact with this regard for those going from 4.2. to 4.3.5.