Upgrading Elastic Stack

This guide describes the upgrading of an Elastic Stack including Filebeat, Logstash, Elasticsearch, and Kibana. We will illustrate package-based installations of these components. You can also install them from binary tarballs, however, this is not preferred or supported under Wazuh documentation.

In addition to Elastic Stack components, you will also find the instructions to install and configure the Wazuh app (deployed as a Kibana plugin).

Note

Upgrading directly to 7.x from 6.6 or earlier requires a full cluster restart

Type Description
From 7.x to 7.y Perform an upgrade from 7.x to 7.y.
From 6.8 to 7.x Perform a rolling upgrade from 6.8 to 7.x.
From a legacy version Perform an upgrade from 6.x to 6.8.