Our main use case for ES/OS is as a storage backend for Graylog. However they stated that they won't offer compatibility beyond Elasticsearch 7.10 and instead will focus on OpenSearch instead, so that's what we did as well. Migration was pretty easy as there is a lot of well written documentation from both Graylog and OpenSearch.
I followed the documentation found online and managed to get the OpenSearch installed and running.
Problem is that, if i stop the ES service, the Graylog server stops receiving messages.
So, i presume i did not made the complete.. transition to OS and i missed some steps..?
I cannot find this in any documentation whatsoever.