I want to upgrade my Graylog Elasticsearch cluster from 5.6 to the latest 6.x. I am finding two errors in my deprecation log for Elasticsearch
[2019-01-07T13:36:59,877][WARN ][o.e.d.e.NodeEnvironment ] ES has detected the [path.data] folder using the cluster name as a folder [/data], Elasticsearch 6.0 will not allow the cluster name as a folder within the data path
I believe this is because my cluster name is graylog and my path is /data/graylog/nodes. I see in the Elasticsearch documentation I could move the data and then change path.data elasticsearch.yml, but it currently points at /data. So, how would I get rid of the graylog in the path?
[2019-01-07T13:24:41,667][WARN ][o.e.d.i.m.TypeParsers ] Expected a boolean [true/false] for property [index] but got [not_analyzed]
I saw another post which said this is a known issue, and it will be fixed. It sounds like this is not supported in 6.x, however. Will this get fixed?
Thank you for your reply. To clarify, currently I have in elasticsearch.yml:
path.data = /data
Error message #1 is appearing in the deprecation log. To fix this problem before upgrade, am I supposed to move my Elasticsearch files from /data/graylog/nodes to /data/graylog? So, the process would be:
Stop Elasticsearch and Graylog
Move the files from /data/graylog/nodes to /data/nodes.
Upgrade to Elasticsearch 6.x
Start Elasticsearch and Graylog again.
No changes to path.data are needed.
For issue #2, do I have to wait for the fix to be made by Graylog developers? Is there a pull request for this issue?