Page MenuHomeMiraheze

Decide whether to switch to opensearch as graylog seems to not be supporting versions passed 7.10
Open, LowPublic

Description

See https://www.graylog.org/post/graylog-to-add-support-for-opensearch, seems likely that graylog will drop support for es rather requiring open search.

We need to decide whether to switch to opensearch or stay with elasticsearch (although graylog doesn't support versions passed 7.10 and we're on 7.16 which has deprecated stuff so we're getting log spam. Graylog won't support version 8 either (this is because of the licensing changes).

I cannot find the deb for open search so we'll have to install from their tar.gz I think (https://opensearch.org/downloads.html)

Event Timeline

Paladox triaged this task as High priority.Apr 5 2022, 20:41
Paladox created this task.

Given the MW team also wish to use ES, it would make little sense to maintain two different versions of ES long term.

It would make more sense to drop graylog for another interface potentially if it will no longer support ES.

We wish to use it when the search team eventually being support up to date. By that time, it might be on open search anyway.

We wish to use it when the search team eventually being support up to date. By that time, it might be on open search anyway.

WMF are seeking to use OpenSearch instead of ES?

In T9033#183407, @John wrote:

We wish to use it when the search team eventually being support up to date. By that time, it might be on open search anyway.

WMF are seeking to use OpenSearch instead of ES?

https://phabricator.wikimedia.org/T280482

Their logstash/Kibana already does. The Search team are a major version behind anyway so they seem to be going ES6 -> ES7 -> OS.

Slowly but yes is the short answer. I don't think after this long without it an extra quarter or half will harm us.

With the above information, move to opensearch seems the better option then. @Paladox

John lowered the priority of this task from High to Normal.Apr 11 2022, 17:06
John moved this task from Incoming to Long Term on the Infrastructure (SRE) board.
In T9033#183405, @John wrote:

Given the MW team also wish to use ES, it would make little sense to maintain two different versions of ES long term.

It would make more sense to drop graylog for another interface potentially if it will no longer support ES.

But which? There’s only logstash and graylog I know of, what other software could we use? (Both of those use es tho graylog only supports 7.10 and won’t support any newer). Logstash uses es and would support the newer versions.

In T9033#183409, @John wrote:

With the above information, move to opensearch seems the better option then. @Paladox

Oh I’ve just seen this sorry for the spam post above

John lowered the priority of this task from Normal to Low.Sun, Apr 17, 20:34