Given the MW team also wish to use ES, it would make little sense to maintain two different versions of ES long term.

It would make more sense to drop graylog for another interface potentially if it will no longer support ES.

We wish to use it when the search team eventually being support up to date. By that time, it might be on open search anyway.

In T9033#183406, @RhinosF1 wrote:

We wish to use it when the search team eventually being support up to date. By that time, it might be on open search anyway.

WMF are seeking to use OpenSearch instead of ES?

In T9033#183407, @John wrote:

In T9033#183406, @RhinosF1 wrote:

We wish to use it when the search team eventually being support up to date. By that time, it might be on open search anyway.

WMF are seeking to use OpenSearch instead of ES?

https://phabricator.wikimedia.org/T280482

Their logstash/Kibana already does. The Search team are a major version behind anyway so they seem to be going ES6 -> ES7 -> OS.

Slowly but yes is the short answer. I don't think after this long without it an extra quarter or half will harm us.

With the above information, move to opensearch seems the better option then. @Paladox

In T9033#183405, @John wrote:

Given the MW team also wish to use ES, it would make little sense to maintain two different versions of ES long term.

It would make more sense to drop graylog for another interface potentially if it will no longer support ES.

But which? There’s only logstash and graylog I know of, what other software could we use? (Both of those use es tho graylog only supports 7.10 and won’t support any newer). Logstash uses es and would support the newer versions.

In T9033#183409, @John wrote:

With the above information, move to opensearch seems the better option then. @Paladox

Oh I’ve just seen this sorry for the spam post above

We can now install opensearch via a deb package: https://opendistro.github.io/for-elasticsearch-docs/docs/install/deb/

@Paladox Is this something for us to do with switching servers?

Yeh we can do this I think (we're running a graylog version that supports OS now).

Opensearch provide a apt repo and the deb package now from 2.5 \o/

Also

root@test131:/etc/opensearch/opensearch-security# curl https://test131.miraheze.org:9200/
{
  "name" : "test131",
  "cluster_name" : "miraheze-general",
  "cluster_uuid" : "a8uCt5VDScWkZsULD9Vmnw",
  "version" : {
    "distribution" : "opensearch",
    "number" : "2.2.0",
    "build_type" : "deb",
    "build_hash" : "b1017fa3b9a1c781d4f34ecee411e0cdf930a515",
    "build_date" : "2022-08-12T15:13:15.856351Z",
    "build_snapshot" : false,
    "lucene_version" : "9.3.0",
    "minimum_wire_compatibility_version" : "7.10.0",
    "minimum_index_compatibility_version" : "7.0.0"
  },
  "tagline" : "The OpenSearch Project: https://opensearch.org/"
}