# Upgrading Graylog V4.3 to V5.0 **URL:** \ **Category:** Graylog Labs\ **Created:** [February 15, 2023, 1:28am UTC](https://community.graylog.org/t/upgrading-graylog-v4-3-to-v5-0/27714 "2023-02-15T01:28:54Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![jivepig](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jivepig/32/13737_2.png) [@jivepig](https://community.graylog.org/u/jivepig)\ **Post date:** [February 15, 2023, 1:28am UTC](https://community.graylog.org/t/upgrading-graylog-v4-3-to-v5-0/27714/1 "2023-02-15T01:28:55Z")
Hey there, Jeff Darrington here. I thought I’d share a blog post with the Upgrade commands and video for upgrading Graylog V4.3 running OpenSearch 1.3 to V5 and OpenSearch 2.5. There is now a .deb package available from OpenSearch to make it much easier. Enjoy and let me know your thoughts! Jeff > **[Upgrade Graylog 4.3 to V5.0 How To](https://www.graylog.org/post/upgrade-graylog-4-3-to-v5-0-how-to/)** > > Follow Ethan Keaton Technical Marketing Manager at Graylog as he will walk you though upgrading from Graylog V4.3 to V5 and Include upgrading OpenSearch to V2.5. ---
**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\ **Post date:** [February 15, 2023, 4:47am UTC](https://community.graylog.org/t/upgrading-graylog-v4-3-to-v5-0/27714/2 "2023-02-15T04:47:29Z")
Hey @jivepig Awesome souce man 👍 Def needed this for some members upgrading Opensearch using the Deb package. ---
**Author:** ![gerdesj](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gerdesj/32/4836_2.png) [@gerdesj](https://community.graylog.org/u/gerdesj)\ **Post date:** [February 16, 2023, 4:26pm UTC](https://community.graylog.org/t/upgrading-graylog-v4-3-to-v5-0/27714/3 "2023-02-16T16:26:51Z")
This: [Prerequisites](https://go2docs.graylog.org/5-0/upgrading_graylog/upgrading_graylog_in_ubuntu.htm) says that the latest version of OpenSearch supported by Graylog 5.0 is 2.3 but the .deb installer of OS is for 2.5, as your guide mentions. I’m going to do it anyway … 8) ---
**Author:** ![jivepig](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jivepig/32/13737_2.png) [@jivepig](https://community.graylog.org/u/jivepig)\ **Post date:** [February 16, 2023, 4:46pm UTC](https://community.graylog.org/t/upgrading-graylog-v4-3-to-v5-0/27714/4 "2023-02-16T16:46:38Z")
We are still updating our docs to cover this. Thank you for your patience. ---
**Author:** ![gerdesj](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gerdesj/32/4836_2.png) [@gerdesj](https://community.graylog.org/u/gerdesj)\ **Post date:** [February 16, 2023, 4:54pm UTC](https://community.graylog.org/t/upgrading-graylog-v4-3-to-v5-0/27714/5 "2023-02-16T16:54:14Z")
Great thanks. I’m having some fun sorting out my Opensearch cluster which started off life as Elasticsearch. I ran OS 1.3 as the elasticsearch user with the data in /var/lib/elasticsearch. I’m sure I meant to fix that and forgot 8) Now I’ve unpicked that, some of the settings in /etc/opensearch/opensearch.yml are generating a lot of Java exceptions which is enlivening my Thursday afternoon! ---
**Author:** ![rkudarat](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/rkudarat/32/14388_2.png) [@rkudarat](https://community.graylog.org/u/rkudarat)\ **Post date:** [March 8, 2023, 3:03am UTC](https://community.graylog.org/t/upgrading-graylog-v4-3-to-v5-0/27714/6 "2023-03-08T03:03:42Z")
Hi, I have a problem upgrading graylog from 4.3 to 5.0. I suppose this should be a straighforward upgrade based on the videos but on my end its not working. Please help. Issue: Graylog 5.0 service is not starting. Previous: graylog-server-4.3.13-1.noarch Current : graylog-server-5.0.5-1.x86\_64 There is no logs when I am starting the service so I am seeking help here. # java -version openjdk version “17.0.1” 2021-10-19 OpenJDK Runtime Environment 21.9 (build 17.0.1+12) OpenJDK 64-Bit Server VM 21.9 (build 17.0.1+12, mixed mode, sharing) ```auto [root@graylogd01 yum.repos.d]# # strace /usr/share/graylog-server/bin/graylog-server execve("/usr/share/graylog-server/bin/graylog-server", ["/usr/share/graylog-server/bin/gr"...], 0x7ffc6df73c40 /* 25 vars */) = 0 brk(NULL) = 0xe4f000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6632c7000 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3 fstat(3, {st_mode=S_IFREG|0644, st_size=45340, ...}) = 0 mmap(NULL, 45340, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa6632bb000 close(3) = 0 open("/lib64/libtinfo.so.5", O_RDONLY|O_CLOEXEC) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0@\316\0\0\0\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=174576, ...}) = 0 mmap(NULL, 2268928, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa662e7d000 mprotect(0x7fa662ea2000, 2097152, PROT_NONE) = 0 mmap(0x7fa6630a2000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x25000) = 0x7fa6630a2000 close(3) = 0 open("/lib64/libdl.so.2", O_RDONLY|O_CLOEXEC) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P\16\0\0\0\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=19248, ...}) = 0 mmap(NULL, 2109744, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa662c79000 mprotect(0x7fa662c7b000, 2097152, PROT_NONE) = 0 mmap(0x7fa662e7b000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fa662e7b000 close(3) = 0 open("/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`&\2\0\0\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=2156592, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6632ba000 mmap(NULL, 3985920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa6628ab000 mprotect(0x7fa662a6f000, 2093056, PROT_NONE) = 0 mmap(0x7fa662c6e000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1c3000) = 0x7fa662c6e000 mmap(0x7fa662c74000, 16896, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fa662c74000 close(3) = 0 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6632b8000 arch_prctl(ARCH_SET_FS, 0x7fa6632b8740) = 0 access("/etc/sysconfig/strcasecmp-nonascii", F_OK) = -1 ENOENT (No such file or directory) access("/etc/sysconfig/strcasecmp-nonascii", F_OK) = -1 ENOENT (No such file or directory) mprotect(0x7fa662c6e000, 16384, PROT_READ) = 0 mprotect(0x7fa662e7b000, 4096, PROT_READ) = 0 mprotect(0x7fa6630a2000, 16384, PROT_READ) = 0 mprotect(0x6dd000, 4096, PROT_READ) = 0 mprotect(0x7fa6632c8000, 4096, PROT_READ) = 0 munmap(0x7fa6632bb000, 45340) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 open("/dev/tty", O_RDWR|O_NONBLOCK) = 3 close(3) = 0 brk(NULL) = 0xe4f000 brk(0xe70000) = 0xe70000 brk(NULL) = 0xe70000 open("/usr/lib/locale/locale-archive", O_RDONLY|O_CLOEXEC) = 3 fstat(3, {st_mode=S_IFREG|0644, st_size=106176928, ...}) = 0 mmap(NULL, 106176928, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa65c368000 close(3) = 0 brk(NULL) = 0xe70000 getuid() = 0 getgid() = 0 geteuid() = 0 getegid() = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 open("/proc/meminfo", O_RDONLY|O_CLOEXEC) = 3 fstat(3, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa6632c6000 read(3, "MemTotal: 16265824 kB\nMemF"..., 1024) = 1024 close(3) = 0 munmap(0x7fa6632c6000, 4096) = 0 rt_sigaction(SIGCHLD, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fa6628e1400}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigaction(SIGCHLD, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fa6628e1400}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fa6628e1400}, 8) = 0 rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6628e1400}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6628e1400}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6628e1400}, 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6628e1400}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6628e1400}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6628e1400}, 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6628e1400}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6628e1400}, 8) = 0 uname({sysname="Linux", nodename="graylogd01", ...}) = 0 stat("/etc/yum.repos.d", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 stat(".", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 getpid() = 22680 open("/usr/lib64/gconv/gconv-modules.cache", O_RDONLY) = 3 fstat(3, {st_mode=S_IFREG|0644, st_size=26970, ...}) = 0 mmap(NULL, 26970, PROT_READ, MAP_SHARED, 3, 0) = 0x7fa6632c0000 close(3) = 0 getppid() = 22678 getpgrp() = 22678 rt_sigaction(SIGCHLD, {sa_handler=0x4414a0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fa6628e1400}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fa6628e1400}, 8) = 0 getrlimit(RLIMIT_NPROC, {rlim_cur=63445, rlim_max=63445}) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 open("/usr/share/graylog-server/bin/graylog-server", O_RDONLY) = 3 ioctl(3, TCGETS, 0x7fff74be3ae0) = -1 ENOTTY (Inappropriate ioctl for device) lseek(3, 0, SEEK_CUR) = 0 read(3, "#!/bin/sh\n\nset -e\n\n# For Debian/"..., 80) = 80 lseek(3, 0, SEEK_SET) = 0 getrlimit(RLIMIT_NOFILE, {rlim_cur=1024, rlim_max=4*1024}) = 0 fcntl(255, F_GETFD) = -1 EBADF (Bad file descriptor) dup2(3, 255) = 255 close(3) = 0 fcntl(255, F_SETFD, FD_CLOEXEC) = 0 fcntl(255, F_GETFL) = 0x8000 (flags O_RDONLY|O_LARGEFILE) fstat(255, {st_mode=S_IFREG|0755, st_size=915, ...}) = 0 lseek(255, 0, SEEK_CUR) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 read(255, "#!/bin/sh\n\nset -e\n\n# For Debian/"..., 915) = 915 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 stat("/etc/default/graylog-server", 0x7fff74be36b0) = -1 ENOENT (No such file or directory) rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 stat("/etc/sysconfig/graylog-server", {st_mode=S_IFREG|0644, st_size=535, ...}) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 open("/etc/sysconfig/graylog-server", O_RDONLY) = 3 fstat(3, {st_mode=S_IFREG|0644, st_size=535, ...}) = 0 read(3, "# Path to the java executable.\nJ"..., 535) = 535 close(3) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 stat("/usr/share/graylog-server/installation-source.sh", {st_mode=S_IFREG|0644, st_size=34, ...}) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 open("/usr/share/graylog-server/installation-source.sh", O_RDONLY) = 3 fstat(3, {st_mode=S_IFREG|0644, st_size=34, ...}) = 0 read(3, "GRAYLOG_INSTALLATION_SOURCE=\"rpm"..., 34) = 34 close(3) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigprocmask(SIG_BLOCK, [INT CHLD], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7fa6632b8a10) = 22682 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 rt_sigaction(SIGINT, {sa_handler=0x43e910, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6628e1400}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6628e1400}, 8) = 0 wait4(-1, Unrecognized VM option 'UseConcMarkSweepGC' Error: Could not create the Java Virtual Machine. Error: A fatal exception has occurred. Program will exit. [{WIFEXITED(s) && WEXITSTATUS(s) == 1}], 0, NULL) = 22682 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22682, si_uid=0, si_status=1, si_utime=0, si_stime=2} --- wait4(-1, 0x7fff74be32d0, WNOHANG, NULL) = -1 ECHILD (No child processes) rt_sigreturn({mask=[]}) = 0 rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6628e1400}, {sa_handler=0x43e910, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa6628e1400}, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 exit_group(1) = ? +++ exited with 1 +++ ``` ---
**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\ **Post date:** [March 8, 2023, 5:52am UTC](https://community.graylog.org/t/upgrading-graylog-v4-3-to-v5-0/27714/7 "2023-03-08T05:52:04Z")
Hey @rkudarat What does your journal show? `root # journalctl -x`