# Upgrade to OpenSearch problem

**URL:** <https://community.graylog.org/t/upgrade-to-opensearch-problem/24346>\
**Category:** Graylog Central (peer support)\
**Created:** [June 16, 2022, 9:20pm UTC](https://community.graylog.org/t/upgrade-to-opensearch-problem/24346 "2022-06-16T21:20:51Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![abadanvolek](https://avatars.discourse-cdn.com/v4/letter/a/57b2e6/32.png) [@abadanvolek](https://community.graylog.org/u/abadanvolek)\
**Post date:** [June 16, 2022, 9:20pm UTC](https://community.graylog.org/t/upgrade-to-opensearch-problem/24346/1 "2022-06-16T21:20:51Z")

</div>

I upgraded to opensearch from elastic after following the guide, Migrating to OpenSearch. Now, can’t connect to web on port 9000. Here is the error in server.log:  
ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused (Connection refused).

I’m running graylog on RHEL8 and the version is 4.3.1. All service status are green.

It looks like graylog is still looking for elasticsearch instead of using opensearch.

your help is much appraciated.

---

<div class="post-metadata">

**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\
**Post date:** [June 16, 2022, 10:22pm UTC](https://community.graylog.org/t/upgrade-to-opensearch-problem/24346/2 "2022-06-16T22:22:50Z")

</div>

Hello && Welocme @abadanvolek

Looks like it cannot connect to 12.0.0.1:9200 check firewalls and you configuration files.  
example:  
ES config

```auto
network.host: 127.0.0.1
http.port: 9200

```

GL config

```auto
elasticsearch_hosts = http://127.0.0.1:9200

```

---

<div class="post-metadata">

**Author:** ![abadanvolek](https://avatars.discourse-cdn.com/v4/letter/a/57b2e6/32.png) [@abadanvolek](https://community.graylog.org/u/abadanvolek)\
**Post date:** [June 16, 2022, 11:58pm UTC](https://community.graylog.org/t/upgrade-to-opensearch-problem/24346/3 "2022-06-16T23:58:00Z")

</div>

Thank you very much for the quick response. That was the solution. I actually had the host’s IP address as opposed to the loop back IP.

Thanks again

---

<div class="post-metadata">

**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\
**Post date:** [June 17, 2022, 12:02am UTC](https://community.graylog.org/t/upgrade-to-opensearch-problem/24346/4 "2022-06-17T00:02:58Z")

</div>

No problem 👍 If you can mark this post as resolved for future searches that would be great.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [July 1, 2022, 12:03am UTC](https://community.graylog.org/t/upgrade-to-opensearch-problem/24346/5 "2022-07-01T00:03:38Z")

</div>

Closed on July 1, 2022, 12:03am UTC

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.