Elastic Agent Updates After SOUP from 2.4.80

[Bigelow-Brown]

Version

2.4.80

Installation Method

Security Onion ISO image

Description

upgrading

Installation Type

Standalone

Location

on-prem with Internet access

Hardware Specs

Exceeds minimum requirements

CPU

96

RAM

404.7GB

Storage for /

478GB

Storage for /nsm

853,940.8 GB

Network Traffic Collection

tap

Network Traffic Speeds

Less than 1Gbps

Status

Yes, all services on all nodes are running OK

Salt Status

No, there are no failures

Logs

No, there are no additional clues

Detail

I am preparing to run soup for the first time since I inherited my Security Onion a few months ago. Reading through the documentation, it mentions possibly needing to update Elastic Agents via Elastic Fleet. Looking through release notes, it looks like there has been an update to the Elastic stack since v2.4.80, so I will need to plan for that as well. My questions are:

1. Will the agents be automatically updated when I run soup, or can I schedule updates for a later time?
2. Will the agents continue to work under the old version until I am able to update them, or do they need to be updated immediately to continue functioning?

Maintenance windows for my servers are different than the window for my SO server, so I am hoping I can schedule those updates for a later date/time. Thanks in advance for your help!

Guidelines

• I have read the discussion guidelines at Read before posting! #1720 and assert that I have followed the guidelines.

[cm-ops]

The agents should upgrade themselves once your version is upgraded. You can also select upgrade from within Fleet. The agent will work unless it is on a version higher than your Fleet server.

Scheduled binary upgrades is an Elastic subscription feature.

[Bigelow-Brown]

Thank you!