Upgrading from Version 10.1, 10.2, 10.3, or 10.4

10.4 HotFix 2

Back Next

Upgrading Elasticsearch Indexes

Upgrade the existing Elasticsearch version 6.2.3 index properties to Elasticsearch version 6.8.6 index properties. To upgrade the indexes, edit the Elasticsearch configuration properties file.

Go to the following directory:

<elasticsearch 6.2.3 installation directory>/config

Copy the

analysis

folder.

Paste the

analysis

folder in the following directory:

<elasticsearch 6.8.6 installation directory>/config

In the Elasticsearch version 6.8.6 configuration directory, edit the following properties in the

elasticsearch.yml

file:

Use a text editor to open the file, and edit the following properties:

Property	Description
xpack.security.transport.ssl.enabled	Specifies whether you want to enable transport layer security (TLS) on the REST layer. Set to true . Default is true .
xpack.security.transport.ssl.verification_mode	Mode to verify the certificate. The supported mode is certificate. Enter the value certificate .
xpack.security.transport.ssl.keystore.path	Relative path to the keystore file. If you used the sip_ant script to create the keystore, use the default path. Default is MDM_ESKEYSTORE_FILE_JKS.keystore .
xpack.security.transport.ssl.truststore.path	Relative path to the truststore file. If you used the sip_ant script to create the truststore, use the default path. Default is MDM_TRUST_JKS.keystore .
xpack.security.transport.ssl.keystore.password	Password for keystore. Default is infa@es .
xpack.security.transport.ssl.truststore.password	Password for truststore. Default is infa@es .
xpack.security.http.ssl.enabled	Specifies whether you want to enable X-Pack. Set to true .
xpack.security.http.ssl.verification_mode	Mode to verify the certificate. The supported mode is certificate. Enter the value certificate .
xpack.security.http.ssl.client_authentication	Specifies whether you want to use the TLS client authentication mode on the REST layer. Set to REQUIRED .
xpack.security.http.ssl.keystore.path	Relative path to the keystore file. If you used the sip_ant script to create the keystore, use the default path. Default is MDM_ESCLIENT_FILE_JKS.keystore .
xpack.security.http.ssl.truststore.path	Relative path to the truststore file. If you used the sip_ant script to create the truststore, use the default path. Default is MDM_TRUST_JKS.keystore .
xpack.security.http.ssl.truststore.password	Password for truststore. Default is infa@es .
xpack.security.http.ssl.keystore.password	Password for keystore. Default is infa@es .
xpack.security.authc.token.enabled	Specifies whether you want to enable authentication token. Ensure that the value is always set to false
xpack.security.authc.api_key.enabled	Specifies whether you want to enable API key token. Ensure that the value is always set to false

In the Elasticsearch version 6.8.6 configuration directory, open the

roles.yml

file and enter the following code to define the user role:


user:  
   cluster: [ 'monitoring_user','transport_client','kibana_user','snapshot_user' ]  
   indices:    
     - names: [ '*' ]      
       privileges: [ 'all' ]

In the Elasticsearch version 6.8.6 configuration directory, open the

elasticsearch.yml

file and enter the following code:

xpack.security.authc:            
              anonymous:
                   username: 
                   roles:
                   authz_exception:

Start Elasticsearch. For more information about how to start Elasticsearch, see the Start Elasticsearch topic.

Run the Elasticsearch health APIs to ensure that the Elasticsearch server uses the HTTPS protocol. For more information about how to test the Elasticsearch APIs, see the Elasticsearch documentation.

Stop the existing Elasticsearch version 6.2.3 and version 6.8.6 environments, the MDM Hub server and Cleanse server services.

Go to the following directory:

<elasticsearch 6.8.6 installation directory>/config

Configure the following properties in the

elasticsearch.yml

file:

Property	Description
path.data	Point to the Elasticsearch 6.2.3 data directory if you want to migrate existing indexes. You can configure multiple data directories. For more information about configuring multiple data directories, see the Elasticsearch documentation. To migrate to Elasticsearch version 6.8.6, your existing Elasticsearch configuration properties must contain the cluster.name and node.name properties. If these properties do not exist, you cannot migrate your existing indexes.
path.logs	Path to the log files.
http.port	Port for the HTTP requests. Enter the same port number that you set in the Elasticsearch 6.2.3 environment.
transport.tcp.port	The TCP bind port. Enter the same TCP bind port number that you set in the Elasticsearch 6.2.3 environment.

Start the Elasticsearch version 6.8.6 environment.

Test the Elasticsearch APIs to ensure the indexes are open and do not display any errors. For more information about how to test Elasticsearch APIs, see the Elasticsearch documentation.

Start the Hub Server, the Process Server and the Elasticsearch services.

Your existing MDM environment is configured with Elasticsearch 6.8.6

Upgrading to Elasticsearch Version 6.8.6 (Optional)

Download Guide

Watch

Comments

Communities

Knowledge Base

Success Portal