Failure on installing elasticsearch - node upgrade problem?!

[develeon]

I'm running Ubuntu 20.04 and, (git rev db27c22) 2.3.210

so-setup-network fails on elasticsearch.

java.lang.IllegalStateException: cannot upgrade a node from version [7.16.3] directly to version [8.6.1], upgrade to version [7.17.0] first.
	at org.elasticsearch.env.NodeMetadata.verifyUpgradeToCurrentVersion(NodeMetadata.java:122) ~[elasticsearch-8.6.1.jar:?]
	at org.elasticsearch.env.NodeEnvironment.checkForIndexCompatibility(NodeEnvironment.java:514) ~[elasticsearch-8.6.1.jar:?]
	at org.elasticsearch.env.NodeEnvironment.upgradeLegacyNodeFolders(NodeEnvironment.java:408) ~[elasticsearch-8.6.1.jar:?]
	at org.elasticsearch.env.NodeEnvironment.<init>(NodeEnvironment.java:301) ~[elasticsearch-8.6.1.jar:?]
	at org.elasticsearch.node.Node.<init>(Node.java:478) ~[elasticsearch-8.6.1.jar:?]

Have tried to reinstall, purge docker images, restart etc but stuck ..

[INFO    ] Completed state [/opt/so/conf/so-status/so-status.conf] at time 22:11:07.862950 (duration_in_ms=5.531)
[INFO    ] Running state [/usr/sbin/so-elasticsearch-templates-load] at time 22:11:07.881983
[INFO    ] Executing state cmd.run for [/usr/sbin/so-elasticsearch-templates-load]
[INFO    ] Executing command '/usr/sbin/so-elasticsearch-templates-load' in directory '/opt/so'
[INFO    ] {'pid': 33780, 'retcode': 0, 'stdout': "Waiting for ElasticSearch....................................................................................................................................................................................................................................................\nConnection attempt timed out.  Unable to connect to ElasticSearch.  \nPlease try: \n  -checking log(s) in /var/log/elasticsearch/\n  -running 'sudo docker ps' \n  -running 'sudo so-elastic-restart'\n\nLoading ECS component templates...\nagent-mappings\n\naws-mappings\n\nazure-mappings\n\nbase-mappings\n\ncef-mappings\n\ncheckpoint-mappings\n\ncisco-mappings\n\nclient-mappings\n\ncloud-mappings\n\ncontainer-mappings\n\ncyberark-mappings\n\ndata_stream-mappings\n\ndestination-mappings\n\ndll-mappings\n\ndns-mappings\n\necs-mappings\n\nelasticsearch-mappings\n\nerror-mappings\n\nevent-mappings\n\nfile-mappings\n\nfortinet-mappings\n\ngcp-mappings\n\ngoogle_workspace-mappings\n\ngroup-mappings\n\nhost-mappings\n\nhttp-mappings\n\njuniper-mappings\n\nkibana-mappings\n\nlog-mappings\n\nlogstash-mappings\n\nmicrosoft-mappings\n\nmisp-mappings\n\nnetflow-mappings\n\nnetwork-mappings\n\no365-mappings\n\nobserver-mappings\n\nokta-mappings\n\norchestrator-mappings\n\norganization-mappings\n\npackage-mappings\n\nprocess-mappings\n\nredis-mappings\n\nregistry-mappings\n\nrelated-mappings\n\nrule-mappings\n\nserver-mappings\n\nservice-mappings\n\nsnyk-mappings\n\nsophos-mappings\n\nsource-mappings\n\nsuricata-mappings\n\nsyslog-mappings\n\nthreat-mappings\n\ntls-mappings\n\ntracing-mappings\n\nurl-mappings\n\nuser-mappings\n\nuser_agent-mappings\n\nvulnerability-mappings\n\nwinlog-mappings\n\nzeek-mappings\n\nLoading Security Onion component templates...\ncase-mappings\n\ncase-settings\n\ncommon-dynamic-mappings\n\ncommon-settings\n\ndtc-agent-mappings\n\ndtc-base-mappings\n\ndtc-client-mappings\n\ndtc-destination-mappings\n\ndtc-dns-mappings\n\ndtc-ecs-mappings\n\ndtc-event-mappings\n\ndtc-file-mappings\n\ndtc-host-mappings\n\ndtc-http-mappings\n\ndtc-network-mappings\n\ndtc-observer-mappings\n\ndtc-process-mappings\n\ndtc-rule-mappings\n\ndtc-service-mappings\n\ndtc-source-mappings\n\ndtc-syslog-mappings\n\ndtc-user-mappings\n\ndtc-user_agent-mappings\n\ndtc-winlog-mappings\n\nendgame-mappings\n\npb-override-destination-mappings\n\npb-override-source-mappings\n\nso-file-mappings\n\nso-rule-mappings\n\nso-scan-mappings\n\n\nLoading Security Onion index templates...\nso-aws\n\nso-azure\n\nso-barracuda\n\nso-beats\n\nso-bluecoat\n\nso-case\n\nso-cef\n\nso-checkpoint\n\nso-cisco\n\nso-common\n\nso-cyberark\n\nso-cylance\n\nso-elasticsearch\n\nso-endgame\n\nso-f5\n\nso-firewall\n\nso-flow\n\nso-fortinet\n\nso-gcp\n\nso-google_workspace\n\nso-idh\n\nso-ids\n\nso-imperva\n\nso-import\n\nso-infoblox\n\nso-juniper\n\nso-kibana\n\nso-kratos\n\nso-logstash\n\nso-microsoft\n\nso-misp\n\nso-netflow\n\nso-netscout\n\nso-o365\n\nso-okta\n\nso-osquery\n\nso-ossec\n\nso-proofpoint\n\nso-radware\n\nso-redis\n\nso-snort\n\nso-snyk\n\nso-sonicwall\n\nso-sophos\n\nso-squid\n\nso-strelka\n\nso-syslog\n\nso-tomcat\n\nso-zeek\n\nso-zscaler", 'stderr': ''}

[cm-ops]

What version are you trying to upgrade from? If it is before 2.3.110, you will need to upgrade to 2.3.130 first. See https://docs.securityonion.net/en/latest/soup.html?highlight=soup#elastic-8.