Version is outdated
The cluster runs an Elasticsearch version that is no longer supported. Without security patches, the cluster is exposed to known vulnerabilities.
For a complete list of insights, refer to AutoOps insights.
| Field | Value |
|---|---|
| Component | Elasticsearch |
| Severity | High |
| Scope | Cluster |
| Domains | version-upgrade |
The following is an example of what you might see when this insight is triggered. Real insights use live data and links from your deployment or cluster.
The cluster runs 8.15.0. The recommended version is 9.5.0.
The following open events are known to stall or fail upgrades. Resolve them before you upgrade. That list is not exhaustive.
Disk watermark flood stage
Deployment not highly available
AutoOps shows different recommendations depending on how their conditions match your deployment or cluster.
Resolve open events before you upgrade
Condition: Shown when upgrade-related events are open.
These open events are known to stall or fail upgrades. Open the list and resolve each event before you upgrade. Also review Watcher, old system indices, and the other preparation steps in the upgrade guide.
Temporary upgrade recovery limit increase
Condition: Shown when none of the recovery-pressure related events are open (CPU, heap, disk watermarks, or high cluster pending tasks).
Raise cluster.routing.allocation.node_concurrent_recoveries temporarily for the rolling upgrade, starting at 8 (the Elasticsearch default is 2). AutoOps shows this action only while CPU, heap, disk watermark, and pending-task insights are not open. If those insights open after you raise the limit, stop increasing it. Restore the transient setting with PUT null after the upgrade.
If shard movement itself is slowing the plan, you might also raise cluster.routing.allocation.cluster_concurrent_rebalance temporarily and restore it after the upgrade. If the cluster has unreplicated indices on included tiers, also raise cluster.routing.allocation.node_initial_primaries_recoveries so missing primaries can reopen faster after a node restarts. Avoid aggressive increases on slow disks or similar storage.
If a node might stay down longer than index.unassigned.node_left.delayed_timeout, review delayed allocation so shards do not start moving unnecessarily during the upgrade.
To restore the temporary settings after the upgrade, send null for the transient keys that you changed.
PUT _cluster/settings
{
"transient": {
"cluster.routing.allocation.node_concurrent_recoveries": 8
}
}
Requires the manage cluster privilege. Requires Elasticsearch 8.0.0 or later. This action changes cluster or index configuration.
Upgrade Elasticsearch
Condition: Always shown for this insight.
Upgrade to the latest minor of your current major before moving to 9.5.0.
Running an unsupported Elasticsearch version means the cluster no longer receives security patches, bug fixes, or compatibility updates. Known vulnerabilities go unaddressed, increasing exposure to security threats. Supported versions benefit from performance and stability improvements that unsupported releases do not receive. Newer releases also include storage and efficiency work, such as better compression, that can reduce the resources a cluster needs for the same workload.
Staying on an unsupported version narrows future upgrade options. Elastic upgrade paths require moving through the latest minor of the current major before crossing a major version boundary.