You can check the current version using the API command:

curl -u $USER:$PASSWORD -X GET http://localhost:9200/license

Upgrade from version 7.0.3

General note

  1. Indicators of compromise (IOCs auto-update) require access to the software provider’s servers.

  2. GeoIP Databases (auto-update) require access to the software provider’s servers.

  3. Archive plugin require ztsd package to work:

    yum install zstd

Upgrade steps

  1. Stop services

    systemctl stop elasticsearch alert kibana cerebro
  2. Upgrade client-node (includes alert engine):

    yum update ./PACKAGE_NAME_VARIABLE-client-node-VERSION_TEMPLATE_VARIABLE-1.el7.x86_64.rpm
  3. Upgrade data-node:

    yum update ./PACKAGE_NAME_VARIABLE-data-node-VERSION_TEMPLATE_VARIABLE-1.el7.x86_64.rpm
  4. Start services:

    systemctl start elasticsearch alert kibana cerebro

Changing OpenJDK version


OpenJDK 11 is supported by Logstash from version 6.8 so if you have an older version of Logstash you must update it.

To update Logstash, follow the steps below:

  1. Back up the following files

    • /etc/logstash/logstash.yml
    • /etc/logstash/piplines.yml
    • /etc/logstash/conf.d
  2. Use the command to check custom Logstash plugins:

    /usr/share/bin/logstash-plugin list --verbose

    and note the result

  3. Install a newer version of Logstash according to the instructions:




  4. Verify installed plugins:

    /usr/share/bin/logstash-plugin list --verbose
  5. Install the missing plugins if necessary:

    /usr/share/bin/logstash-plugin install plugin_name
  6. Run Logstash using the command:

    systemctl start logstash


Energy Logserver can use OpenJDK version 10 or later. If you want to use OpenJSK version 10 or later, configure the Elasticsearch service as follows:

  1. After installing OpenJDK, select the correct version that Elasticsearch will use:

    alternative --config java
  2. Open the /etc/elasticsearch/jvm.options file in a text editor:

    vi /etc/elasticsearch/jvm.options
  3. Disable the OpenJDK version 8 section:

    ## JDK 8 GC logging
  4. Enable the OpenJDK version 11 section

    ## G1GC Configuration
    # NOTE: G1GC is only supported on JDK version 10 or later.
    # To use G1GC uncomment the lines below.
  5. Restart the Elasticsearch service

    systemctl restart elasticsearch