Migrating to 8.3edit

This section discusses the changes that you need to be aware of when migrating your application to Elasticsearch 8.3.

See also What’s new in 8.3 and Release notes.

Breaking changesedit

There are no breaking changes in Elasticsearch 8.3.


The following functionality has been deprecated in Elasticsearch 8.3 and will be removed in a future version. While this won’t have an immediate impact on your applications, we strongly encourage you take the described steps to update your code after upgrading to 8.3.

To find out if you are using any deprecated functionality, enable deprecation logging.

Cluster and node setting deprecationsedit

Configuring a bind DN in an LDAP or Active Directory (AD) realm without a corresponding bind password is deprecated

For LDAP or AD authentication realms, setting a bind DN (via the xpack.security.authc.realms.ldap.*.bind_dn realm setting) without a bind password is a misconfiguration that may prevent successful authentication to the node. In the next major release, nodes will fail to start if a bind DN is specified without a password.

If you have a bind DN configured for an LDAP or AD authentication realm, set a bind password for LDAP or Active Directory. Configuring a bind DN without a password generates a warning in the deprecation logs.

Note: This deprecation only applies if your current LDAP or AD configuration specifies a bind DN without a password. This scenario is unlikely, but might impact a small subset of users.