Best Approach for updating a Hive Install?

[lsp-cyber]

@t3chn0m4g3 what is the best workflow or approach to updating a hive install with multiple honeypots?

should I update the hive server then sensors? or sensors then hive? does it matter?

thanks

[t3chn0m4g3]

@lsp-cyber Assuming you are running T-Pot 24.04.1:
It really depends if you set up your T-Pots as default with daily reboots and automatic image updates in place (baby steps towards Elastic 9.2.3) otherwise there is a chance of the Hive breaking.
Backup the Hive, test the upgrade on a different machine, if everything works fine update the production Hive and then the Sensors.

If you are still on 24.04.0 the steps are the same but the Hive breaking is more likely.