Upgrading Elastic Stack

This guide describes the upgrading of an Elastic Stack including Filebeat, Logstash, Elasticsearch, and Kibana. We will illustrate package-based installations of these components. You can also install them from binary tarballs, however, this is not preferred or supported under Wazuh documentation.

In addition to Elastic Stack components, you will also find the instructions to install and configure the Wazuh app (deployed as a Kibana plugin).


Upgrading directly to 7.x from 6.6 or earlier requires a full cluster restart



From 7.x to 7.y

Perform an upgrade from 7.x to 7.y.

From 6.8 to 7.x

Perform a rolling upgrade from 6.8 to 7.x.

From a legacy version

Perform an upgrade from 6.x to 6.8.