diff --git a/UPGRADING.md b/UPGRADING.md
index 0b87afbae6f4..e5c8303a7485 100644
--- a/UPGRADING.md
+++ b/UPGRADING.md
@@ -17,6 +17,9 @@ refactoring. Regular users should not change the setting.
 compatibility, the default value is still count-based (`500`). Previously configured count-based values are
 still supported.
 
+- The legacy mode configuration setting of newly created Kafka based inputs has been changed to false. The default mode
+will now use the high level consumer API that has been available since Kafka 1.x.
+
 ## Java API Changes
 
 The following Java Code API changes have been made.
@@ -30,18 +33,20 @@ The following Java Code API changes have been made.
 
 The following REST API changes have been made.
 
-| Endpoint                                 | Description                                                                                                                     |
-|------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------|
-| `PUT /system/indices/index_set_defaults` | This endpoint now expects an index set template id as payload. The values of the index set template are used as default values. |
-| `GET licenses/{licenseId}`          | deprecated                                                                             |
-| `GET licenses`                      | deprecated                                                                             |
-| `GET licenses/status`               | deprecated                                                                             |
-| `GET licenses/status/active`        | New: Show status for currently active license                                          |
-| `GET licenses/validity/for-subject` | Check for valid license for given subject                                              |
-| `GET licenses/status/for-subject`   | deprecated                                                                             |
-| `DELETE licenses/{licenseId}`        | When called with a contract ID it will delete the contract and all associated licenses |
-| `GET licenses/traffic-remaining` | Get the time series data for remaining provisioned traffic                             |
-| `GET licenses/metrics` | Get the stats for consumed and remaining provisioned traffic                                                                                       |
+| Endpoint                                         | Description                                                                                                                     |
+|--------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------|
+| `PUT /system/indices/index_set_defaults`         | This endpoint now expects an index set template id as payload. The values of the index set template are used as default values. |
+| `GET licenses/{licenseId}`                       | deprecated                                                                                                                      |
+| `GET licenses`                                   | deprecated                                                                                                                      |
+| `GET licenses/status`                            | deprecated                                                                                                                      |
+| `GET licenses/status/active`                     | New: Show status for currently active license                                                                                   |
+| `GET licenses/validity/for-subject`              | Check for valid license for given subject                                                                                       |
+| `GET licenses/status/for-subject`                | deprecated                                                                                                                      |
+| `DELETE licenses/{licenseId}`                    | When called with a contract ID it will delete the contract and all associated licenses                                          |
+| `GET licenses/traffic-remaining`                 | Get the time series data for remaining provisioned traffic                                                                      |
+| `GET licenses/metrics`                           | Get the stats for consumed and remaining provisioned traffic                                                                    |
+| `GET licenses/traffic-threshold`                 | Get info about license traffic threshold warning                                                                                |
+| `PUT licenses/traffic-threshold/acknowledgement` | Acknowledge current traffic threshold warning                                                                                   |
 
 ## Deprecated Inputs
 
diff --git a/changelog/unreleased/issue-19693.toml b/changelog/unreleased/issue-19693.toml
new file mode 100644
index 000000000000..115c70ed7f3c
--- /dev/null
+++ b/changelog/unreleased/issue-19693.toml
@@ -0,0 +1,4 @@
+type="c"
+message="Changed default setting for Kafka transports to non-legacy mode."
+
+issues=["19693"]
diff --git a/changelog/unreleased/pr-20081.toml b/changelog/unreleased/pr-20081.toml
new file mode 100644
index 000000000000..5f830d20e855
--- /dev/null
+++ b/changelog/unreleased/pr-20081.toml
@@ -0,0 +1,5 @@
+type = "f"
+message = "Add support for remote-reindex migration of closed indices"
+
+pulls = ["20081"]
+issues = ["20068"]
diff --git a/changelog/unreleased/pr-20110.toml b/changelog/unreleased/pr-20110.toml
index 00a6717495e3..f8c1a286322a 100644
--- a/changelog/unreleased/pr-20110.toml
+++ b/changelog/unreleased/pr-20110.toml
@@ -1,4 +1,5 @@
 type = "a"
 message = "Added categories to Streams to allow Illuminate content to be scoped to multiple products."
 
+issues = ["graylog-plugin-enterprise#7945"]
 pulls = ["20110"]
diff --git a/data-node/src/main/java/org/graylog/datanode/rest/IndexStateController.java b/data-node/src/main/java/org/graylog/datanode/rest/IndexStateController.java
new file mode 100644
index 000000000000..9ccb4dc2957f
--- /dev/null
+++ b/data-node/src/main/java/org/graylog/datanode/rest/IndexStateController.java
@@ -0,0 +1,121 @@
+/*
+ * Copyright (C) 2020 Graylog, Inc.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the Server Side Public License, version 1,
+ * as published by MongoDB, Inc.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * Server Side Public License for more details.
+ *
+ * You should have received a copy of the Server Side Public License
+ * along with this program. If not, see
+ * <http://www.mongodb.com/licensing/server-side-public-license>.
+ */
+package org.graylog.datanode.rest;
+
+import jakarta.inject.Inject;
+import jakarta.ws.rs.POST;
+import jakarta.ws.rs.Path;
+import jakarta.ws.rs.Produces;
+import jakarta.ws.rs.core.MediaType;
+import okhttp3.Credentials;
+import okhttp3.OkHttpClient;
+import okhttp3.Request;
+import okhttp3.RequestBody;
+import org.graylog.datanode.configuration.DatanodeTrustManagerProvider;
+import org.graylog.storage.opensearch2.IndexState;
+import org.graylog.storage.opensearch2.IndexStateChangeRequest;
+
+import javax.net.ssl.SSLContext;
+import javax.net.ssl.TrustManager;
+import javax.net.ssl.X509TrustManager;
+import java.io.IOException;
+import java.security.KeyManagementException;
+import java.security.NoSuchAlgorithmException;
+import java.security.SecureRandom;
+import java.util.Locale;
+import java.util.Objects;
+
+import static org.graylog.datanode.rest.OpensearchConnectionCheckController.CONNECT_TIMEOUT;
+import static org.graylog.datanode.rest.OpensearchConnectionCheckController.READ_TIMEOUT;
+import static org.graylog.datanode.rest.OpensearchConnectionCheckController.WRITE_TIMEOUT;
+
+@Path("/index-state")
+@Produces(MediaType.APPLICATION_JSON)
+public class IndexStateController {
+
+    private final DatanodeTrustManagerProvider datanodeTrustManagerProvider;
+    private final OkHttpClient httpClient;
+
+    @Inject
+    public IndexStateController(DatanodeTrustManagerProvider datanodeTrustManagerProvider) {
+        this.datanodeTrustManagerProvider = datanodeTrustManagerProvider;
+        this.httpClient = new OkHttpClient.Builder()
+                .retryOnConnectionFailure(true)
+                .connectTimeout(CONNECT_TIMEOUT)
+                .writeTimeout(WRITE_TIMEOUT)
+                .readTimeout(READ_TIMEOUT)
+                .build();
+    }
+
+    @POST
+    @Path("/get")
+    public IndexState get(IndexStateChangeRequest indexStateChangeRequest) {
+        final String host = indexStateChangeRequest.host().endsWith("/") ? indexStateChangeRequest.host() : indexStateChangeRequest.host() + "/";
+        final Request.Builder request = new Request.Builder()
+                .url(host + "_cat/indices/" + indexStateChangeRequest.indexName() + "/?h=status");
+        if (Objects.nonNull(indexStateChangeRequest.username()) && Objects.nonNull(indexStateChangeRequest.password())) {
+            request.header("Authorization", Credentials.basic(indexStateChangeRequest.username(), indexStateChangeRequest.password()));
+        }
+        try (var response = getClient().newCall(request.build()).execute()) {
+            if (response.isSuccessful() && response.body() != null) {
+                final String state = response.body().string().trim().toUpperCase(Locale.ROOT);
+                return IndexState.valueOf(state);
+            } else {
+                throw new RuntimeException("Failed to detect open/close index status " + indexStateChangeRequest.indexName() + ". Code: " + response.code() + "; message=" + response.message());
+            }
+        } catch (IOException e) {
+            throw new RuntimeException("Failed to open/close index" + indexStateChangeRequest.indexName(), e);
+        }
+    }
+
+    @POST
+    @Path("/set")
+    public IndexState change(IndexStateChangeRequest indexStateChangeRequest) {
+        return performAction(indexStateChangeRequest);
+    }
+
+    private IndexState performAction(IndexStateChangeRequest indexStateChangeRequest) {
+        final String host = indexStateChangeRequest.host().endsWith("/") ? indexStateChangeRequest.host() : indexStateChangeRequest.host() + "/";
+        final Request.Builder request = new Request.Builder()
+                .post(RequestBody.create("", okhttp3.MediaType.parse(MediaType.APPLICATION_JSON)))
+                .url(host + indexStateChangeRequest.indexName() + "/" + (indexStateChangeRequest.action() == IndexState.OPEN ? "_open" : "_close"));
+        if (Objects.nonNull(indexStateChangeRequest.username()) && Objects.nonNull(indexStateChangeRequest.password())) {
+            request.header("Authorization", Credentials.basic(indexStateChangeRequest.username(), indexStateChangeRequest.password()));
+        }
+        try (var response = getClient().newCall(request.build()).execute()) {
+            if (response.isSuccessful()) {
+                return indexStateChangeRequest.action();
+            } else {
+                throw new RuntimeException("Failed to open/close index " + indexStateChangeRequest.indexName() + ". Code: " + response.code() + "; message=" + response.message());
+            }
+        } catch (IOException e) {
+            throw new RuntimeException("Failed to open/close index" + indexStateChangeRequest.indexName(), e);
+        }
+    }
+
+    private OkHttpClient getClient() {
+        try {
+            final SSLContext ctx = SSLContext.getInstance("TLS");
+            final X509TrustManager trustManager = datanodeTrustManagerProvider.get();
+            ctx.init(null, new TrustManager[]{trustManager}, new SecureRandom());
+            return httpClient.newBuilder().sslSocketFactory(ctx.getSocketFactory(), trustManager).build();
+        } catch (NoSuchAlgorithmException | KeyManagementException e) {
+            throw new RuntimeException(e);
+
+        }
+    }
+}
diff --git a/data-node/src/main/java/org/graylog/datanode/rest/OpensearchConnectionCheckController.java b/data-node/src/main/java/org/graylog/datanode/rest/OpensearchConnectionCheckController.java
index 96170bb78226..5a11826a1505 100644
--- a/data-node/src/main/java/org/graylog/datanode/rest/OpensearchConnectionCheckController.java
+++ b/data-node/src/main/java/org/graylog/datanode/rest/OpensearchConnectionCheckController.java
@@ -26,6 +26,7 @@
 import okhttp3.OkHttpClient;
 import okhttp3.Request;
 import org.graylog.datanode.configuration.DatanodeTrustManagerProvider;
+import org.graylog.storage.opensearch2.ConnectionCheckIndex;
 import org.graylog.storage.opensearch2.ConnectionCheckRequest;
 import org.graylog.storage.opensearch2.ConnectionCheckResponse;
 import org.graylog2.security.TrustAllX509TrustManager;
@@ -42,6 +43,7 @@
 import java.security.SecureRandom;
 import java.security.cert.X509Certificate;
 import java.time.Duration;
+import java.util.Comparator;
 import java.util.LinkedList;
 import java.util.List;
 import java.util.Locale;
@@ -74,19 +76,24 @@ public ConnectionCheckResponse status(ConnectionCheckRequest request) {
         final List<X509Certificate> unknownCertificates = new LinkedList<>();
         try {
             unknownCertificates.addAll(extractUnknownCertificates(request.host()));
-            final List<String> indices = getAllIndicesFrom(request.host(), request.username(), request.password(), request.trustUnknownCerts());
+            final List<ConnectionCheckIndex> indices = getAllIndicesFrom(request.host(), request.username(), request.password(), request.trustUnknownCerts());
             return ConnectionCheckResponse.success(indices, unknownCertificates);
         } catch (Exception e) {
             return ConnectionCheckResponse.error(e, unknownCertificates);
         }
     }
 
-    List<String> getAllIndicesFrom(final String host, final String username, final String password, boolean trustUnknownCerts) {
-        var url = (host.endsWith("/") ? host : host + "/") + "_cat/indices?h=index";
+    List<ConnectionCheckIndex> getAllIndicesFrom(final String host, final String username, final String password, boolean trustUnknownCerts) {
+        var url = (host.endsWith("/") ? host : host + "/") + "_cat/indices?h=index,status";
         try (var response = getClient(trustUnknownCerts).newCall(new Request.Builder().url(url).header("Authorization", Credentials.basic(username, password)).build()).execute()) {
             if (response.isSuccessful() && response.body() != null) {
                 // filtering all indices that start with "." as they indicate a system index - we don't want to reindex those
-                return new BufferedReader(new StringReader(response.body().string())).lines().filter(i -> !i.startsWith(".")).sorted().toList();
+                return new BufferedReader(new StringReader(response.body().string()))
+                        .lines()
+                        .filter(i -> !i.startsWith("."))
+                        .map(this::parseIndexLine)
+                        .sorted(Comparator.comparing(ConnectionCheckIndex::name, Comparator.naturalOrder()))
+                        .toList();
             } else {
                 String message = String.format(Locale.ROOT, "Could not read list of indices from %s. Code=%d, message=%s", host, response.code(), response.message());
                 throw new RuntimeException(message);
@@ -96,6 +103,11 @@ List<String> getAllIndicesFrom(final String host, final String username, final S
         }
     }
 
+    private ConnectionCheckIndex parseIndexLine(String line) {
+        final String[] parts = line.split("\\s+");
+        return new ConnectionCheckIndex(parts[0], parts[1].contains("close"));
+    }
+
 
     private OkHttpClient getClient(boolean trustUnknownCerts) {
         try {
diff --git a/data-node/src/main/java/org/graylog/datanode/rest/RestBindings.java b/data-node/src/main/java/org/graylog/datanode/rest/RestBindings.java
index e949bb8dc8e5..c7da3594af20 100644
--- a/data-node/src/main/java/org/graylog/datanode/rest/RestBindings.java
+++ b/data-node/src/main/java/org/graylog/datanode/rest/RestBindings.java
@@ -26,6 +26,7 @@ protected void configure() {
         addSystemRestResource(ManagementController.class);
         addSystemRestResource(IndicesDirectoryController.class);
         addSystemRestResource(OpensearchConnectionCheckController.class);
+        addSystemRestResource(IndexStateController.class);
         addSystemRestResource(CertificatesController.class);
     }
 }
diff --git a/full-backend-tests/src/test/java/org/graylog/datanode/RemoteReindexingMigrationIT.java b/full-backend-tests/src/test/java/org/graylog/datanode/RemoteReindexingMigrationIT.java
index 9b799b12cbf9..46d1261c10f0 100644
--- a/full-backend-tests/src/test/java/org/graylog/datanode/RemoteReindexingMigrationIT.java
+++ b/full-backend-tests/src/test/java/org/graylog/datanode/RemoteReindexingMigrationIT.java
@@ -27,6 +27,7 @@
 import org.assertj.core.api.Assertions;
 import org.graylog.shaded.opensearch2.org.opensearch.action.index.IndexRequest;
 import org.graylog.shaded.opensearch2.org.opensearch.action.index.IndexResponse;
+import org.graylog.shaded.opensearch2.org.opensearch.client.indices.CloseIndexRequest;
 import org.graylog.shaded.opensearch2.org.opensearch.client.indices.CreateIndexRequest;
 import org.graylog.shaded.opensearch2.org.opensearch.client.indices.CreateIndexResponse;
 import org.graylog.storage.opensearch2.testing.OpenSearchInstance;
@@ -78,6 +79,8 @@ void testRemoteAsyncReindexing() throws ExecutionException, RetryException {
         final String messageContent = ingestRandomMessage(indexName);
         final String messageContent2 = ingestRandomMessage(indexName2);
 
+        closeIndex(indexName);
+
         // flush the newly created document
         openSearchInstance.client().refreshNode();
 
@@ -99,11 +102,14 @@ void testRemoteAsyncReindexing() throws ExecutionException, RetryException {
         final String status = response.extract().body().jsonPath().get("status");
         Assertions.assertThat(status).isEqualTo("FINISHED");
 
-        Assertions.assertThat(waitForMessage(indexName, messageContent)).containsEntry("message", messageContent);
         Assertions.assertThat(waitForMessage(indexName2, messageContent2)).containsEntry("message", messageContent2);
 
     }
 
+    private void closeIndex(String indexName) {
+        openSearchInstance.openSearchClient().execute((restHighLevelClient, requestOptions) -> restHighLevelClient.indices().close(new CloseIndexRequest(indexName), requestOptions));
+    }
+
     /**
      * @return name of the newly created index
      */
diff --git a/graylog-plugin-parent/pom.xml b/graylog-plugin-parent/pom.xml
index 3356bab9e2f5..8fc28294e8de 100644
--- a/graylog-plugin-parent/pom.xml
+++ b/graylog-plugin-parent/pom.xml
@@ -40,7 +40,7 @@
         <web.build-dir>${project.build.directory}/web/build</web.build-dir>
 
         <!-- Plugin versions -->
-        <jdeb.version>1.10</jdeb.version>
+        <jdeb.version>1.11</jdeb.version>
         <rpm-maven.version>2.2.0</rpm-maven.version>
     </properties>
 
diff --git a/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/AggregatedConnectionResponse.java b/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/AggregatedConnectionResponse.java
index 241db2aa45ea..435441c63c34 100644
--- a/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/AggregatedConnectionResponse.java
+++ b/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/AggregatedConnectionResponse.java
@@ -39,11 +39,11 @@
 
 public record AggregatedConnectionResponse(Map<String, ConnectionCheckResponse> responses) {
     @Nonnull
-    public List<String> indices() {
+    public List<ConnectionCheckIndex> indices() {
         return responses.values().stream()
                 .filter(v -> Objects.nonNull(v.indices()))
                 .flatMap(v -> v.indices().stream())
-                .sorted(Comparator.naturalOrder())
+                .sorted(Comparator.comparing(ConnectionCheckIndex::name, Comparator.naturalOrder()))
                 .distinct()
                 .collect(Collectors.toList());
     }
diff --git a/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/ConnectionCheckIndex.java b/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/ConnectionCheckIndex.java
new file mode 100644
index 000000000000..9ec0bbba68ee
--- /dev/null
+++ b/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/ConnectionCheckIndex.java
@@ -0,0 +1,21 @@
+/*
+ * Copyright (C) 2020 Graylog, Inc.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the Server Side Public License, version 1,
+ * as published by MongoDB, Inc.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * Server Side Public License for more details.
+ *
+ * You should have received a copy of the Server Side Public License
+ * along with this program. If not, see
+ * <http://www.mongodb.com/licensing/server-side-public-license>.
+ */
+package org.graylog.storage.opensearch2;
+
+public record ConnectionCheckIndex(String name, boolean closed) {
+
+}
diff --git a/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/ConnectionCheckResponse.java b/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/ConnectionCheckResponse.java
index 64e4429c75cd..6e4ddf0e885c 100644
--- a/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/ConnectionCheckResponse.java
+++ b/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/ConnectionCheckResponse.java
@@ -29,9 +29,9 @@
 import java.util.stream.Collectors;
 
 @JsonInclude(JsonInclude.Include.NON_EMPTY)
-public record ConnectionCheckResponse(List<String> indices, List<String> certificates,
+public record ConnectionCheckResponse(List<ConnectionCheckIndex> indices, List<String> certificates,
                                       String error) {
-    public static ConnectionCheckResponse success(List<String> indices, List<X509Certificate> certificates) {
+    public static ConnectionCheckResponse success(List<ConnectionCheckIndex> indices, List<X509Certificate> certificates) {
         return new ConnectionCheckResponse(indices, encodeCerts(certificates), null);
     }
 
diff --git a/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/DatanodeRemoteIndexStateResource.java b/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/DatanodeRemoteIndexStateResource.java
new file mode 100644
index 000000000000..6eb65948c348
--- /dev/null
+++ b/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/DatanodeRemoteIndexStateResource.java
@@ -0,0 +1,35 @@
+/*
+ * Copyright (C) 2020 Graylog, Inc.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the Server Side Public License, version 1,
+ * as published by MongoDB, Inc.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * Server Side Public License for more details.
+ *
+ * You should have received a copy of the Server Side Public License
+ * along with this program. If not, see
+ * <http://www.mongodb.com/licensing/server-side-public-license>.
+ */
+package org.graylog.storage.opensearch2;
+
+import jakarta.validation.Valid;
+import jakarta.validation.constraints.NotNull;
+import retrofit2.Call;
+import retrofit2.http.Body;
+import retrofit2.http.GET;
+import retrofit2.http.POST;
+
+public interface DatanodeRemoteIndexStateResource {
+
+    @POST("index-state/get")
+    Call<IndexState> readState(@Body @Valid @NotNull IndexStateGetRequest request);
+
+    @POST("index-state/set")
+    Call<IndexState> changeState(@Body @Valid @NotNull IndexStateChangeRequest request);
+
+
+}
diff --git a/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/IndexState.java b/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/IndexState.java
new file mode 100644
index 000000000000..cf7ebe316e6c
--- /dev/null
+++ b/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/IndexState.java
@@ -0,0 +1,21 @@
+/*
+ * Copyright (C) 2020 Graylog, Inc.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the Server Side Public License, version 1,
+ * as published by MongoDB, Inc.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * Server Side Public License for more details.
+ *
+ * You should have received a copy of the Server Side Public License
+ * along with this program. If not, see
+ * <http://www.mongodb.com/licensing/server-side-public-license>.
+ */
+package org.graylog.storage.opensearch2;
+
+public enum IndexState {
+    OPEN, CLOSE
+}
diff --git a/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/IndexStateChangeRequest.java b/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/IndexStateChangeRequest.java
new file mode 100644
index 000000000000..aabd84694be4
--- /dev/null
+++ b/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/IndexStateChangeRequest.java
@@ -0,0 +1,20 @@
+/*
+ * Copyright (C) 2020 Graylog, Inc.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the Server Side Public License, version 1,
+ * as published by MongoDB, Inc.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * Server Side Public License for more details.
+ *
+ * You should have received a copy of the Server Side Public License
+ * along with this program. If not, see
+ * <http://www.mongodb.com/licensing/server-side-public-license>.
+ */
+package org.graylog.storage.opensearch2;
+
+public record IndexStateChangeRequest(String indexName, IndexState action, String host, String username, String password) {
+}
diff --git a/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/IndexStateGetRequest.java b/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/IndexStateGetRequest.java
new file mode 100644
index 000000000000..1319901e5932
--- /dev/null
+++ b/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/IndexStateGetRequest.java
@@ -0,0 +1,20 @@
+/*
+ * Copyright (C) 2020 Graylog, Inc.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the Server Side Public License, version 1,
+ * as published by MongoDB, Inc.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * Server Side Public License for more details.
+ *
+ * You should have received a copy of the Server Side Public License
+ * along with this program. If not, see
+ * <http://www.mongodb.com/licensing/server-side-public-license>.
+ */
+package org.graylog.storage.opensearch2;
+
+public record IndexStateGetRequest(String indexName, String host, String username, String password) {
+}
diff --git a/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/RemoteReindexingMigrationAdapterOS2.java b/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/RemoteReindexingMigrationAdapterOS2.java
index 1c748b3dfc70..244ea7cccb90 100644
--- a/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/RemoteReindexingMigrationAdapterOS2.java
+++ b/graylog-storage-opensearch2/src/main/java/org/graylog/storage/opensearch2/RemoteReindexingMigrationAdapterOS2.java
@@ -38,6 +38,7 @@
 import org.graylog.shaded.opensearch2.org.opensearch.client.RequestOptions;
 import org.graylog.shaded.opensearch2.org.opensearch.client.Response;
 import org.graylog.shaded.opensearch2.org.opensearch.client.ResponseException;
+import org.graylog.shaded.opensearch2.org.opensearch.client.indices.CloseIndexRequest;
 import org.graylog.shaded.opensearch2.org.opensearch.client.tasks.TaskSubmissionResponse;
 import org.graylog.shaded.opensearch2.org.opensearch.cluster.health.ClusterHealthStatus;
 import org.graylog.shaded.opensearch2.org.opensearch.common.xcontent.json.JsonXContent;
@@ -160,8 +161,7 @@ private Boolean isIndexSetCurrentlyMigrated(IndexSet indexSet, RemoteReindexMigr
     @Override
     public String start(RemoteReindexRequest request) {
         final AggregatedConnectionResponse response = getAllIndicesFrom(request.uri(), request.username(), request.password(), request.trustUnknownCerts());
-        final List<String> indices = isAllIndices(request.indices()) ? response.indices() : request.indices();
-        final MigrationConfiguration migration = reindexMigrationService.saveMigration(MigrationConfiguration.forIndices(indices, response.certificates()));
+        final MigrationConfiguration migration = reindexMigrationService.saveMigration(MigrationConfiguration.forIndices(request.indices(), response.certificates()));
         doStartMigration(migration, request);
         return migration.id();
 
@@ -282,7 +282,7 @@ public IndexerConnectionCheckResult checkConnection(@Nonnull URI remoteHost, @Nu
             reindexAllowlist.validate();
             final AggregatedConnectionResponse results = getAllIndicesFrom(remoteHost, username, password, trustUnknownCerts);
             final List<RemoteIndex> indices = results.indices().stream()
-                    .map(i -> new RemoteIndex(i, indexSetRegistry.isManagedIndex(i)))
+                    .map(i -> new RemoteIndex(i.name(), indexSetRegistry.isManagedIndex(i.name()), i.closed()))
                     .distinct()
                     .toList();
             if (results.error() != null && !results.error().isEmpty()) {
@@ -384,10 +384,6 @@ private static String uriToString(URI uri) {
         }
     }
 
-    boolean isAllIndices(final List<String> indices) {
-        return indices == null || indices.isEmpty() || (indices.size() == 1 && "*".equals(indices.get(0)));
-    }
-
     private void startAsyncTasks(MigrationConfiguration migration, RemoteReindexRequest request) {
         final int threadsCount = Math.max(1, Math.min(request.threadsCount(), migration.indices().size()));
 
@@ -403,7 +399,9 @@ private void startAsyncTasks(MigrationConfiguration migration, RemoteReindexRequ
 
     private void executeReindexAsync(MigrationConfiguration migration, URI uri, String username, String password, IndexMigrationConfiguration index) {
         final String indexName = index.indexName();
+
         try (XContentBuilder builder = JsonXContent.contentBuilder().prettyPrint()) {
+            final boolean closeAfterMigration = openIndexIfNeeded(migration, uri, username, password, indexName);
             final BytesReference query = BytesReference.bytes(matchAllQuery().toXContent(builder, ToXContent.EMPTY_PARAMS));
             logInfo(migration, "Executing async reindex for " + indexName);
             final TaskSubmissionResponse task = client.execute((c, requestOptions) -> {
@@ -414,12 +412,53 @@ private void executeReindexAsync(MigrationConfiguration migration, URI uri, Stri
             });
             reindexMigrationService.assignTask(migration.id(), indexName, task.getTask());
             waitForTaskCompleted(migration, indexName, task.getTask());
+            if(closeAfterMigration) {
+                closeMigratedIndex(migration, uri, username, password, indexName);
+            }
         } catch (Exception e) {
             final String message = "Could not reindex index: " + indexName + " - " + e.getMessage();
             logError(migration, message, e);
         }
     }
 
+    private void closeMigratedIndex(MigrationConfiguration migration, URI uri, String username, String password, String indexName) {
+        closeRemoteIndex(uri, username, password, indexName);
+        client.execute((restHighLevelClient, requestOptions) -> restHighLevelClient.indices().close(new CloseIndexRequest(indexName), requestOptions));
+        logInfo(migration, "Restoring original index state, both source and target index " + indexName + " closed after migration");
+    }
+
+    private boolean openIndexIfNeeded(MigrationConfiguration migration, URI uri, String username, String password, String indexName) {
+        final IndexState indexState = getIndexState(uri, username, password, indexName);
+
+        boolean closeAfterMigration = false;
+
+        if(indexState == IndexState.CLOSE) {
+            logInfo(migration, "Source index " + indexName + " is closed, reopening for the migration");
+            closeAfterMigration = true;
+            openRemoteIndex(uri, username, password, indexName);
+        }
+        return closeAfterMigration;
+    }
+
+    private void openRemoteIndex(URI uri, String username, String password, String indexName) {
+        datanodeRestApiProxy.remoteInterface(DatanodeResolver.ANY_NODE_KEYWORD, DatanodeRemoteIndexStateResource.class, datanodeRemoteIndexStateResource -> datanodeRemoteIndexStateResource.changeState(new IndexStateChangeRequest(
+                indexName, IndexState.OPEN, uri.toString(), username, password
+        )));
+    }
+
+    private void closeRemoteIndex(URI uri, String username, String password, String indexName) {
+        datanodeRestApiProxy.remoteInterface(DatanodeResolver.ANY_NODE_KEYWORD, DatanodeRemoteIndexStateResource.class, datanodeRemoteIndexStateResource -> datanodeRemoteIndexStateResource.changeState(new IndexStateChangeRequest(
+                indexName, IndexState.CLOSE, uri.toString(), username, password
+        )));
+    }
+
+    private IndexState getIndexState(URI uri, String username, String password, String indexName) {
+        final IndexState indexState = datanodeRestApiProxy.remoteInterface(DatanodeResolver.ANY_NODE_KEYWORD, DatanodeRemoteIndexStateResource.class, resource -> resource.readState(new IndexStateGetRequest(
+                indexName, uri.toString(), username, password
+        ))).values().iterator().next();
+        return indexState;
+    }
+
 
     private void logInfo(MigrationConfiguration migration, String message) {
         LOG.info(message);
diff --git a/graylog-storage-opensearch2/src/test/java/org/graylog/storage/opensearch2/AggregatedConnectionResponseTest.java b/graylog-storage-opensearch2/src/test/java/org/graylog/storage/opensearch2/AggregatedConnectionResponseTest.java
index 9a4bb11b8adb..cdd12bfad3d2 100644
--- a/graylog-storage-opensearch2/src/test/java/org/graylog/storage/opensearch2/AggregatedConnectionResponseTest.java
+++ b/graylog-storage-opensearch2/src/test/java/org/graylog/storage/opensearch2/AggregatedConnectionResponseTest.java
@@ -36,13 +36,17 @@ class AggregatedConnectionResponseTest {
     @Test
     void testAggregateIndices() {
         final AggregatedConnectionResponse aggregatedResponse = new AggregatedConnectionResponse(Map.of(
-                "node-one", new ConnectionCheckResponse(List.of("graylog_0", "graylog_1", "graylog_2"), Collections.emptyList(), null),
-                "node-two", new ConnectionCheckResponse(List.of("graylog_0", "graylog_1", "graylog_2"), Collections.emptyList(), null),
-                "node-three", new ConnectionCheckResponse(List.of("graylog_0", "graylog_1", "graylog_2"), Collections.emptyList(), null)
+                "node-one", new ConnectionCheckResponse(List.of(i("graylog_0"), i("graylog_1"), i("graylog_2")), Collections.emptyList(), null),
+                "node-two", new ConnectionCheckResponse(List.of(i("graylog_0"), i("graylog_1"), i("graylog_2")), Collections.emptyList(), null),
+                "node-three", new ConnectionCheckResponse(List.of(i("graylog_0"), i("graylog_1"), i("graylog_2")), Collections.emptyList(), null)
         ));
         Assertions.assertThat(aggregatedResponse.indices())
                 .hasSize(3)
-                .contains("graylog_0", "graylog_1", "graylog_2");
+                .contains(i("graylog_0"), i("graylog_1"), i("graylog_2"));
+    }
+
+    private ConnectionCheckIndex i(String indexName) {
+        return new ConnectionCheckIndex(indexName, false);
     }
 
     @Test
@@ -75,9 +79,9 @@ void testAggregateCertificates() throws Exception {
 
 
         final AggregatedConnectionResponse aggregatedResponse = new AggregatedConnectionResponse(Map.of(
-                "node-one", new ConnectionCheckResponse(List.of("graylog_0", "graylog_1", "graylog_2"), Collections.singletonList(pemCert), null),
-                "node-two", new ConnectionCheckResponse(List.of("graylog_0", "graylog_1", "graylog_2"), Collections.singletonList(pemCert), null),
-                "node-three", new ConnectionCheckResponse(List.of("graylog_0", "graylog_1", "graylog_2"), Collections.singletonList(pemCert), null)
+                "node-one", new ConnectionCheckResponse(List.of(i("graylog_0"), i("graylog_1"), i("graylog_2")), Collections.singletonList(pemCert), null),
+                "node-two", new ConnectionCheckResponse(List.of(i("graylog_0"), i("graylog_1"), i("graylog_2")), Collections.singletonList(pemCert), null),
+                "node-three", new ConnectionCheckResponse(List.of(i("graylog_0"), i("graylog_1"), i("graylog_2")), Collections.singletonList(pemCert), null)
         ));
 
         Assertions.assertThat(aggregatedResponse.certificates())
@@ -94,9 +98,9 @@ void testAggregateCertificatesWithError() throws Exception {
 
 
         final AggregatedConnectionResponse aggregatedResponse = new AggregatedConnectionResponse(Map.of(
-                "node-one", new ConnectionCheckResponse(List.of("graylog_0", "graylog_1", "graylog_2"), Collections.singletonList(pemCert), "Unknown cert"),
-                "node-two", new ConnectionCheckResponse(List.of("graylog_0", "graylog_1", "graylog_2"), Collections.singletonList(pemCert), "Unknown cert"),
-                "node-three", new ConnectionCheckResponse(List.of("graylog_0", "graylog_1", "graylog_2"), Collections.singletonList(pemCert), "Unknown cert")
+                "node-one", new ConnectionCheckResponse(List.of(i("graylog_0"), i("graylog_1"), i("graylog_2")), Collections.singletonList(pemCert), "Unknown cert"),
+                "node-two", new ConnectionCheckResponse(List.of(i("graylog_0"), i("graylog_1"), i("graylog_2")), Collections.singletonList(pemCert), "Unknown cert"),
+                "node-three", new ConnectionCheckResponse(List.of(i("graylog_0"), i("graylog_1"), i("graylog_2")), Collections.singletonList(pemCert), "Unknown cert")
         ));
 
         Assertions.assertThat(aggregatedResponse.error())
diff --git a/graylog2-server/src/main/java/org/graylog/plugins/views/search/searchtypes/export/XLSXWriter.java b/graylog2-server/src/main/java/org/graylog/plugins/views/search/searchtypes/export/XLSXWriter.java
index be90bb54fdbb..1ec9516e6f6a 100644
--- a/graylog2-server/src/main/java/org/graylog/plugins/views/search/searchtypes/export/XLSXWriter.java
+++ b/graylog2-server/src/main/java/org/graylog/plugins/views/search/searchtypes/export/XLSXWriter.java
@@ -59,20 +59,22 @@ public static void createWorksheetFor(final XSSFWorkbook wb, final String sheetN
                     cell.setCellValue(d);
                 } else if(rawData instanceof Boolean b) {
                     cell.setCellValue(b);
-                } if(rawData instanceof Date d) {
+                } else if (rawData instanceof Date d) {
                     cell.setCellValue(d);
-                } if(rawData instanceof LocalDateTime ldt) {
+                } else if (rawData instanceof LocalDateTime ldt) {
                     cell.setCellValue(ldt);
-                } if(rawData instanceof Calendar cal) {
+                } else if (rawData instanceof Calendar cal) {
                     cell.setCellValue(cal);
-                } if(rawData instanceof String s) {
+                } else if (rawData instanceof String s) {
                     cell.setCellValue(s);
-                } if(rawData instanceof RichTextString rts) {
+                } else if (rawData instanceof RichTextString rts) {
                     cell.setCellValue(rts);
-                } if(rawData instanceof LocalDate ld) {
+                } else if (rawData instanceof LocalDate ld) {
                     cell.setCellValue(ld);
-                } else {
+                } else if (rawData != null) {
                     cell.setCellValue(rawData.toString());
+                } else {
+                    cell.setBlank();
                 }
             }
         }
diff --git a/graylog2-server/src/main/java/org/graylog2/indexer/migration/RemoteIndex.java b/graylog2-server/src/main/java/org/graylog2/indexer/migration/RemoteIndex.java
index a8d6f26ead99..68bd27fed517 100644
--- a/graylog2-server/src/main/java/org/graylog2/indexer/migration/RemoteIndex.java
+++ b/graylog2-server/src/main/java/org/graylog2/indexer/migration/RemoteIndex.java
@@ -16,5 +16,5 @@
  */
 package org.graylog2.indexer.migration;
 
-public record RemoteIndex(String name, boolean managed) {
+public record RemoteIndex(String name, boolean managed, boolean closed) {
 }
diff --git a/graylog2-server/src/main/java/org/graylog2/inputs/transports/KafkaTransport.java b/graylog2-server/src/main/java/org/graylog2/inputs/transports/KafkaTransport.java
index 4d3f0aa6c9a5..7b0d4b91e5f9 100644
--- a/graylog2-server/src/main/java/org/graylog2/inputs/transports/KafkaTransport.java
+++ b/graylog2-server/src/main/java/org/graylog2/inputs/transports/KafkaTransport.java
@@ -28,6 +28,7 @@
 import com.google.common.util.concurrent.Uninterruptibles;
 import com.google.inject.assistedinject.Assisted;
 import com.google.inject.assistedinject.AssistedInject;
+import jakarta.inject.Named;
 import org.apache.kafka.clients.consumer.ConsumerRecord;
 import org.apache.kafka.clients.consumer.ConsumerRecords;
 import org.apache.kafka.clients.consumer.InvalidOffsetException;
@@ -66,8 +67,6 @@
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
 
-import jakarta.inject.Named;
-
 import java.io.ByteArrayInputStream;
 import java.io.IOException;
 import java.nio.charset.StandardCharsets;
@@ -507,7 +506,7 @@ public ConfigurationRequest getRequestedConfiguration() {
 
             cr.addField(new BooleanField(CK_LEGACY,
                     "Legacy mode",
-                    true,
+                    false,
                     "Use old ZooKeeper-based consumer API. (Used before Graylog 3.3)",
                     10
             ));
diff --git a/graylog2-server/src/main/java/org/graylog2/rest/resources/datanodes/DatanodeRestApiProxy.java b/graylog2-server/src/main/java/org/graylog2/rest/resources/datanodes/DatanodeRestApiProxy.java
index 7cd1d43e5e74..d1478f6e35b7 100644
--- a/graylog2-server/src/main/java/org/graylog2/rest/resources/datanodes/DatanodeRestApiProxy.java
+++ b/graylog2-server/src/main/java/org/graylog2/rest/resources/datanodes/DatanodeRestApiProxy.java
@@ -166,7 +166,7 @@ public <RemoteInterfaceType, RemoteResponseType> Map<String, RemoteResponseType>
                             .build();
                     try {
                         final retrofit2.Response<RemoteResponseType> response = function.apply(retrofit.create(interfaceClass)).execute();
-                        if (response.isSuccessful() && response.body() != null) {
+                        if (response.isSuccessful() && response.body() != null) { // TODO: this causes exceptions when the remote if returns no body but ok state!
                             return response.body();
                         } else {
                             throw new IllegalStateException("Failed to trigger datanode request. Code: " + response.code() + ", message: " + response.message());
diff --git a/graylog2-server/src/test/java/org/junit/jupiter/engine/descriptor/ContainerMatrixEngineDescriptor.java b/graylog2-server/src/test/java/org/junit/jupiter/engine/descriptor/ContainerMatrixEngineDescriptor.java
index 294a0ea60447..2aff7d56be66 100644
--- a/graylog2-server/src/test/java/org/junit/jupiter/engine/descriptor/ContainerMatrixEngineDescriptor.java
+++ b/graylog2-server/src/test/java/org/junit/jupiter/engine/descriptor/ContainerMatrixEngineDescriptor.java
@@ -58,9 +58,8 @@ public JupiterEngineExecutionContext prepare(JupiterEngineExecutionContext conte
         MutableExtensionRegistry extensionRegistry = MutableExtensionRegistry.createRegistryWithDefaultExtensions(
                 context.getConfiguration());
         EngineExecutionListener executionListener = context.getExecutionListener();
-        ExecutableInvoker executableInvoker = new DefaultExecutableInvoker(context);
         ExtensionContext extensionContext = new ContainerMatrixExtensionContext(executionListener, this,
-                context.getConfiguration(), executableInvoker);
+                context.getConfiguration());
 
         // @formatter:off
         return context.extend()
diff --git a/graylog2-server/src/test/java/org/junit/jupiter/engine/descriptor/ContainerMatrixExtensionContext.java b/graylog2-server/src/test/java/org/junit/jupiter/engine/descriptor/ContainerMatrixExtensionContext.java
index 15d081deee46..cb8affe52ed9 100644
--- a/graylog2-server/src/test/java/org/junit/jupiter/engine/descriptor/ContainerMatrixExtensionContext.java
+++ b/graylog2-server/src/test/java/org/junit/jupiter/engine/descriptor/ContainerMatrixExtensionContext.java
@@ -17,7 +17,7 @@
 package org.junit.jupiter.engine.descriptor;
 
 import org.junit.jupiter.api.TestInstance;
-import org.junit.jupiter.api.extension.ExecutableInvoker;
+import org.junit.jupiter.api.extension.ExtensionContext;
 import org.junit.jupiter.api.extension.TestInstances;
 import org.junit.jupiter.engine.config.JupiterConfiguration;
 import org.junit.platform.engine.EngineExecutionListener;
@@ -31,10 +31,9 @@ public class ContainerMatrixExtensionContext extends AbstractExtensionContext<Co
 
     ContainerMatrixExtensionContext(EngineExecutionListener engineExecutionListener,
                                     ContainerMatrixEngineDescriptor testDescriptor,
-                                    JupiterConfiguration configuration,
-                                    ExecutableInvoker executableInvoker) {
+                                    JupiterConfiguration configuration) {
 
-        super(null, engineExecutionListener, testDescriptor, configuration, executableInvoker);
+        super(null, engineExecutionListener, testDescriptor, configuration, ExtensionContext::getExecutableInvoker);
     }
 
     @Override
diff --git a/graylog2-web-interface/package.json b/graylog2-web-interface/package.json
index 8b7e56c5d9ad..3d0ca6778b29 100644
--- a/graylog2-web-interface/package.json
+++ b/graylog2-web-interface/package.json
@@ -71,7 +71,7 @@
     "interactjs": "^1.4.0-rc.13",
     "leaflet": "^1.5.1",
     "lodash": "^4.17.4",
-    "marked": "^13.0.0",
+    "marked": "^14.0.0",
     "material-symbols": "^0.22.0",
     "md5": "^2.2.1",
     "moment-duration-format": "2.3.2",
diff --git a/graylog2-web-interface/packages/graylog-web-plugin/package.json b/graylog2-web-interface/packages/graylog-web-plugin/package.json
index 5e94f85d2e01..a8b545c07f30 100644
--- a/graylog2-web-interface/packages/graylog-web-plugin/package.json
+++ b/graylog2-web-interface/packages/graylog-web-plugin/package.json
@@ -48,7 +48,7 @@
     "react": "18.3.1",
     "react-dom": "18.2.0",
     "react-router-bootstrap": "0.26.3",
-    "react-router-dom": "6.26.0",
+    "react-router-dom": "6.26.1",
     "reflux": "0.2.13",
     "styled-components": "6.1.1",
     "typescript": "5.5.4",
diff --git a/graylog2-web-interface/packages/stylelint-config-graylog/package.json b/graylog2-web-interface/packages/stylelint-config-graylog/package.json
index c01732ac2444..4600919038f4 100644
--- a/graylog2-web-interface/packages/stylelint-config-graylog/package.json
+++ b/graylog2-web-interface/packages/stylelint-config-graylog/package.json
@@ -14,7 +14,7 @@
   "license": "SSPL-1.0",
   "dependencies": {
     "postcss-styled-syntax": "0.6.4",
-    "stylelint": "16.7.0",
+    "stylelint": "16.8.2",
     "stylelint-config-recommended": "14.0.1",
     "stylelint-config-standard": "36.0.1",
     "stylelint-config-styled-components": "0.1.1"
diff --git a/graylog2-web-interface/src/components/datanode/migrations/remoteReindexing/MigrateExistingData.tsx b/graylog2-web-interface/src/components/datanode/migrations/remoteReindexing/MigrateExistingData.tsx
index a9d6d709e318..bd947ea6e37c 100644
--- a/graylog2-web-interface/src/components/datanode/migrations/remoteReindexing/MigrateExistingData.tsx
+++ b/graylog2-web-interface/src/components/datanode/migrations/remoteReindexing/MigrateExistingData.tsx
@@ -43,6 +43,7 @@ const SearchContainer = styled.div`
 type RemoteIndex = {
   name: string,
   managed: boolean,
+  closed: boolean,
 }
 
 type RemoteReindexCheckConnection = {
@@ -228,10 +229,14 @@ const MigrateExistingData = ({ currentStep, onTriggerStep, hideActions }: Migrat
                          label={(
                            <>
                              <span>{index.name} </span>
-                             {!index.managed && (
+                             {!index.managed && !index.closed && (
                                <Icon name="warning"
                                      title="This is an index not managed by Graylog. If you import it, you will not be able to query it in Graylog." />
                              )}
+                             {index.closed && (
+                               <Icon name="warning"
+                                     title="This index is closed, will be reopened and closed again during the migration." />
+                             )}
                            </>
                          )}
                          disabled={isLoading}
diff --git a/graylog2-web-interface/src/components/event-definitions/event-definition-form/AddNotificationForm.jsx b/graylog2-web-interface/src/components/event-definitions/event-definition-form/AddNotificationForm.jsx
index 986e0b900d20..eb4a5840a70b 100644
--- a/graylog2-web-interface/src/components/event-definitions/event-definition-form/AddNotificationForm.jsx
+++ b/graylog2-web-interface/src/components/event-definitions/event-definition-form/AddNotificationForm.jsx
@@ -142,7 +142,8 @@ class AddNotificationForm extends React.Component {
                       placeholder="Select Notification"
                       onChange={this.handleSelectNotificationChange}
                       options={this.formatNotifications(notifications)}
-                      value={selectedNotification} />
+                      value={selectedNotification}
+                      menuPlacement="bottom" />
               <HelpBlock>
                 Select a Notification to use on Alerts of this kind or create a new Notification that you can
                 later use in other Alerts.
diff --git a/graylog2-web-interface/src/components/indices/helpers/isIndexFieldTypeChangeAllowed.ts b/graylog2-web-interface/src/components/indices/helpers/isIndexFieldTypeChangeAllowed.ts
index f83de120dde9..7cdb580bf1c6 100644
--- a/graylog2-web-interface/src/components/indices/helpers/isIndexFieldTypeChangeAllowed.ts
+++ b/graylog2-web-interface/src/components/indices/helpers/isIndexFieldTypeChangeAllowed.ts
@@ -17,7 +17,7 @@
 
 import type { IndexSet } from 'stores/indices/IndexSetsStore';
 
-const TEMPLATE_TYPES = ['failures', 'events'];
+const TEMPLATE_TYPES = ['failures', 'events', 'illuminate_content'];
 const isIndexFieldTypeChangeAllowed = (indexSet: IndexSet) => !TEMPLATE_TYPES.includes(indexSet?.index_template_type);
 
 export default isIndexFieldTypeChangeAllowed;
diff --git a/graylog2-web-interface/src/components/indices/hooks/useIndexSetsList.ts b/graylog2-web-interface/src/components/indices/hooks/useIndexSetsList.ts
new file mode 100644
index 000000000000..b5a31c3ab4e5
--- /dev/null
+++ b/graylog2-web-interface/src/components/indices/hooks/useIndexSetsList.ts
@@ -0,0 +1,65 @@
+/*
+ * Copyright (C) 2020 Graylog, Inc.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the Server Side Public License, version 1,
+ * as published by MongoDB, Inc.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * Server Side Public License for more details.
+ *
+ * You should have received a copy of the Server Side Public License
+ * along with this program. If not, see
+ * <http://www.mongodb.com/licensing/server-side-public-license>.
+ */
+import { useQuery } from '@tanstack/react-query';
+
+import UserNotification from 'util/UserNotification';
+import fetch from 'logic/rest/FetchProvider';
+import { qualifyUrl } from 'util/URLUtils';
+import ApiRoutes from 'routing/ApiRoutes';
+import type { IndexSet, IndexSetsResponseType, IndexSetsStats } from 'stores/indices/IndexSetsStore';
+
+type State = {
+  indexSetsCount: number,
+  indexSets: Array<IndexSet>,
+  indexSetStats: IndexSetsStats | null,
+}
+const getUrl = (stats:boolean) => qualifyUrl(ApiRoutes.IndexSetsApiController.list(stats).url);
+const fetchIndexSetsList = (stats:boolean): Promise<State> => fetch('GET', getUrl(stats)).then((response: IndexSetsResponseType) => ({
+  indexSetsCount: response.total,
+  indexSets: response.index_sets,
+  indexSetStats: response.stats,
+}));
+
+const initialData: State = { indexSets: [], indexSetsCount: null, indexSetStats: null };
+
+const useIndexSetsList = (stats: boolean = false) : {
+  data: State,
+  refetch: () => void,
+  isSuccess: boolean,
+  isInitialLoading: boolean,
+} => {
+  const { data, refetch, isInitialLoading, isSuccess } = useQuery<State>(
+    ['IndexSetsList', stats],
+    () => fetchIndexSetsList(stats),
+    {
+      onError: (errorThrown) => {
+        UserNotification.error(`Loading index sets with list failed with status: ${errorThrown}`,
+          'Could not load index sets list');
+      },
+      keepPreviousData: true,
+    },
+  );
+
+  return ({
+    data: data ?? initialData,
+    refetch,
+    isSuccess,
+    isInitialLoading,
+  });
+};
+
+export default useIndexSetsList;
diff --git a/graylog2-web-interface/src/stores/indices/IndexSetsStore.ts b/graylog2-web-interface/src/stores/indices/IndexSetsStore.ts
index 158389a20d8a..e929320e4015 100644
--- a/graylog2-web-interface/src/stores/indices/IndexSetsStore.ts
+++ b/graylog2-web-interface/src/stores/indices/IndexSetsStore.ts
@@ -83,11 +83,11 @@ export type IndexSetStats = {
   size: number,
 }
 
-type IndexSetsStats = {
+export type IndexSetsStats = {
   [key: string]: IndexSetStats
 }
 
-type IndexSetsResponseType = {
+export type IndexSetsResponseType = {
   total: number,
   index_sets: Array<IndexSet>,
   stats: IndexSetsStats,
diff --git a/graylog2-web-interface/src/util/DocsHelper.ts b/graylog2-web-interface/src/util/DocsHelper.ts
index caf92d843b5f..1ca7073de119 100644
--- a/graylog2-web-interface/src/util/DocsHelper.ts
+++ b/graylog2-web-interface/src/util/DocsHelper.ts
@@ -37,6 +37,7 @@ const docsHelper = {
     INDEXER_FAILURES: 'indexer-failures',
     INDEX_MODEL: 'index-model',
     LICENSE: 'license',
+    LICENSE_MANAGEMENT: 'license-management',
     LOAD_BALANCERS: 'load-balancers',
     LOOKUPTABLES: 'lookuptables',
     OPERATIONS_CHANGELOG: 'changelog-graylog',
diff --git a/graylog2-web-interface/src/views/components/sidebar/highlighting/Scale.ts b/graylog2-web-interface/src/views/components/sidebar/highlighting/Scale.ts
index c6ec32fd225f..b9c5b85fbfc8 100644
--- a/graylog2-web-interface/src/views/components/sidebar/highlighting/Scale.ts
+++ b/graylog2-web-interface/src/views/components/sidebar/highlighting/Scale.ts
@@ -15,7 +15,7 @@
  * <http://www.mongodb.com/licensing/server-side-public-license>.
  */
 import { scales } from 'plotly.js/src/components/colorscale';
-import * as chroma from 'chroma-js';
+import chroma from 'chroma-js';
 
 const plotlyScaleToChroma = (plotlyScale: Array<[domain: number, color: string]>) => {
   const domains = plotlyScale.map(([domain]) => domain);
diff --git a/graylog2-web-interface/src/views/logic/fieldactions/ChangeFieldType/ChangeFieldTypeModal.test.tsx b/graylog2-web-interface/src/views/logic/fieldactions/ChangeFieldType/ChangeFieldTypeModal.test.tsx
index 937af5502b4b..5e22b3f18633 100644
--- a/graylog2-web-interface/src/views/logic/fieldactions/ChangeFieldType/ChangeFieldTypeModal.test.tsx
+++ b/graylog2-web-interface/src/views/logic/fieldactions/ChangeFieldType/ChangeFieldTypeModal.test.tsx
@@ -18,6 +18,7 @@ import * as React from 'react';
 import { render, screen, fireEvent, waitFor } from 'wrappedTestingLibrary';
 import selectEvent from 'react-select-event';
 
+import { MockStore } from 'helpers/mocking';
 import asMock from 'helpers/mocking/AsMock';
 import useFieldTypeMutation from 'views/logic/fieldactions/ChangeFieldType/hooks/useFieldTypeMutation';
 import useFieldTypeUsages from 'views/logic/fieldactions/ChangeFieldType/hooks/useFieldTypeUsages';
@@ -29,6 +30,8 @@ import ChangeFieldTypeModal from 'views/logic/fieldactions/ChangeFieldType/Chang
 import type { Attributes } from 'stores/PaginationTypes';
 import suppressConsole from 'helpers/suppressConsole';
 import useFieldTypesForMappings from 'views/logic/fieldactions/ChangeFieldType/hooks/useFieldTypesForMappings';
+import useIndexSetsList from 'components/indices/hooks/useIndexSetsList';
+import type { IndexSet } from 'stores/indices/IndexSetsStore';
 
 const onCloseMock = jest.fn();
 const renderChangeFieldTypeModal = ({
@@ -116,6 +119,20 @@ jest.mock('views/logic/fieldactions/ChangeFieldType/hooks/useFieldTypeMutation',
 
 jest.mock('components/common/EntityDataTable/hooks/useUserLayoutPreferences');
 
+jest.mock('components/indices/hooks/useIndexSetsList');
+
+jest.mock('stores/indices/IndexSetsStore', () => ({
+  IndexSetsActions: {
+    list: jest.fn(),
+  },
+  IndexSetsStore: MockStore(['getInitialState', () => ({
+    indexSets: [
+      { id: 'id-1', title: 'Index Title 1' },
+      { id: 'id-2', title: 'Index Title 2' },
+    ],
+  })]),
+}));
+
 describe('ChangeFieldTypeModal', () => {
   const putFieldTypeMutationMock = jest.fn(() => Promise.resolve());
 
@@ -133,6 +150,20 @@ describe('ChangeFieldTypeModal', () => {
       },
     });
 
+    asMock(useIndexSetsList).mockReturnValue({
+      data: {
+        indexSets: [
+          { id: 'id-1', title: 'Index Title 1' },
+          { id: 'id-2', title: 'Index Title 2' },
+        ] as Array<IndexSet>,
+        indexSetsCount: 2,
+        indexSetStats: null,
+      },
+      isSuccess: true,
+      isInitialLoading: false,
+      refetch: () => {},
+    });
+
     asMock(useFieldTypeMutation).mockReturnValue({ isLoading: false, putFieldTypeMutation: putFieldTypeMutationMock });
     asMock(useFieldTypeUsages).mockReturnValue(paginatedFieldUsage);
 
diff --git a/graylog2-web-interface/src/views/logic/fieldactions/ChangeFieldType/IndexSetsTable.tsx b/graylog2-web-interface/src/views/logic/fieldactions/ChangeFieldType/IndexSetsTable.tsx
index 8cbfbbd09a96..1074f498983f 100644
--- a/graylog2-web-interface/src/views/logic/fieldactions/ChangeFieldType/IndexSetsTable.tsx
+++ b/graylog2-web-interface/src/views/logic/fieldactions/ChangeFieldType/IndexSetsTable.tsx
@@ -32,6 +32,9 @@ import type { FieldTypeUsage, FieldTypes } from 'views/logic/fieldactions/Change
 import useColumnRenderers from 'views/logic/fieldactions/ChangeFieldType/hooks/useColumnRenderers';
 import BulkActionsDropdown from 'components/common/EntityDataTable/BulkActionsDropdown';
 import useCurrentStream from 'views/logic/fieldactions/ChangeFieldType/hooks/useCurrentStream';
+import isIndexFieldTypeChangeAllowed from 'components/indices/helpers/isIndexFieldTypeChangeAllowed';
+import useIndexSetsList from 'components/indices/hooks/useIndexSetsList';
+import type { IndexSet } from 'stores/indices/IndexSetsStore';
 
 const Container = styled.div`
   margin-top: 20px;
@@ -44,8 +47,16 @@ type Props = {
   initialSelection: Array<string>
 }
 
+const mapper = (indexSets: Array<IndexSet>): Record<string, IndexSet> => {
+  if (!indexSets) return null;
+
+  return Object.fromEntries(indexSets.map((indexSet) => ([indexSet.id, indexSet])));
+};
+
 const IndexSetsTable = ({ field, setIndexSetSelection, fieldTypes, initialSelection }: Props) => {
   const [activePage, setActivePage] = useState(1);
+  const { data, isSuccess } = useIndexSetsList();
+  const mappedIndexSets = useMemo(() => mapper(data?.indexSets), [data?.indexSets]);
 
   const { layoutConfig, isInitialLoading: isLoadingLayoutPreferences } = useTableLayout({
     entityTableId: ENTITY_TABLE_ID,
@@ -96,7 +107,13 @@ const IndexSetsTable = ({ field, setIndexSetSelection, fieldTypes, initialSelect
     setIndexSetSelection(newSelection);
   }, [setIndexSetSelection]);
 
-  if (isLoadingLayoutPreferences || isLoading) {
+  const isEntitySelectable = useCallback((entity) => {
+    const indexSetId = entity.id;
+
+    return isIndexFieldTypeChangeAllowed(mappedIndexSets[indexSetId]);
+  }, [mappedIndexSets]);
+
+  if (isLoadingLayoutPreferences || isLoading || !isSuccess) {
     return <Spinner />;
   }
 
@@ -119,6 +136,7 @@ const IndexSetsTable = ({ field, setIndexSetSelection, fieldTypes, initialSelect
                                              onChangeSelection,
                                              initialSelection,
                                              actions: <BulkActionsDropdown />,
+                                             isEntitySelectable,
                                            }}
                                            columnDefinitions={attributes}
                                            columnRenderers={columnRenderers}
diff --git a/graylog2-web-interface/src/views/logic/fieldactions/ChangeFieldType/hooks/useInitialSelection.tsx b/graylog2-web-interface/src/views/logic/fieldactions/ChangeFieldType/hooks/useInitialSelection.tsx
index 38746beeef1c..5cc74f892d8a 100644
--- a/graylog2-web-interface/src/views/logic/fieldactions/ChangeFieldType/hooks/useInitialSelection.tsx
+++ b/graylog2-web-interface/src/views/logic/fieldactions/ChangeFieldType/hooks/useInitialSelection.tsx
@@ -20,19 +20,29 @@ import { useStore } from 'stores/connect';
 import type { Stream } from 'views/stores/StreamsStore';
 import { StreamsStore } from 'views/stores/StreamsStore';
 import useCurrentStream from 'views/logic/fieldactions/ChangeFieldType/hooks/useCurrentStream';
+import type { IndexSet, IndexSetsStoreState } from 'stores/indices/IndexSetsStore';
+import { IndexSetsStore } from 'stores/indices/IndexSetsStore';
+import isIndexFieldTypeChangeAllowed from 'components/indices/helpers/isIndexFieldTypeChangeAllowed';
 
 const streamsMapper = ({ streams }) => streams.map((stream: Stream) => ({ indexSet: stream.index_set_id, id: stream.id }));
 
+const indexSetsStoreMapper = ({ indexSets }: IndexSetsStoreState): Record<string, IndexSet> => {
+  if (!indexSets) return null;
+
+  return Object.fromEntries(indexSets.map((indexSet) => ([indexSet.id, indexSet])));
+};
+
 const useInitialSelection = () => {
   const currentStreams = useCurrentStream();
+  const indexSets = useStore(IndexSetsStore, indexSetsStoreMapper);
   const availableStreams: Array<{ indexSet: string, id: string }> = useStore(StreamsStore, streamsMapper);
 
   return useMemo(() => {
     const currentStreamSet = new Set(currentStreams);
-    const filterFn = currentStreamSet.size > 0 ? ({ id }) => currentStreamSet.has(id) : () => true;
+    const filterFn = currentStreamSet.size > 0 ? ({ id, indexSet }) => currentStreamSet.has(id) && isIndexFieldTypeChangeAllowed(indexSets[indexSet]) : () => true;
 
-    return availableStreams.filter(filterFn).map(({ indexSet }) => indexSet);
-  }, [availableStreams, currentStreams]);
+    return indexSets ? availableStreams.filter(filterFn).map(({ indexSet }) => indexSet) : [];
+  }, [availableStreams, currentStreams, indexSets]);
 };
 
 export default useInitialSelection;
diff --git a/graylog2-web-interface/src/views/logic/views/formatting/highlighting/HighlightingColor.ts b/graylog2-web-interface/src/views/logic/views/formatting/highlighting/HighlightingColor.ts
index 9a277f7ae2c0..eea5e363f5e1 100644
--- a/graylog2-web-interface/src/views/logic/views/formatting/highlighting/HighlightingColor.ts
+++ b/graylog2-web-interface/src/views/logic/views/formatting/highlighting/HighlightingColor.ts
@@ -14,7 +14,7 @@
  * along with this program. If not, see
  * <http://www.mongodb.com/licensing/server-side-public-license>.
  */
-import type * as chroma from 'chroma-js';
+import type chroma from 'chroma-js';
 
 import scaleForGradient from 'views/components/sidebar/highlighting/Scale';
 
diff --git a/graylog2-web-interface/yarn.lock b/graylog2-web-interface/yarn.lock
index 756793c9c66f..523caeae6ae1 100644
--- a/graylog2-web-interface/yarn.lock
+++ b/graylog2-web-interface/yarn.lock
@@ -1756,25 +1756,25 @@
   dependencies:
     "@jridgewell/trace-mapping" "0.3.9"
 
-"@csstools/css-parser-algorithms@^2.7.1":
-  version "2.7.1"
-  resolved "https://registry.yarnpkg.com/@csstools/css-parser-algorithms/-/css-parser-algorithms-2.7.1.tgz#6d93a8f7d8aeb7cd9ed0868f946e46f021b6aa70"
-  integrity sha512-2SJS42gxmACHgikc1WGesXLIT8d/q2l0UFM7TaEeIzdFCE/FPMtTiizcPGGJtlPo2xuQzY09OhrLTzRxqJqwGw==
+"@csstools/css-parser-algorithms@^3.0.0":
+  version "3.0.1"
+  resolved "https://registry.yarnpkg.com/@csstools/css-parser-algorithms/-/css-parser-algorithms-3.0.1.tgz#f14ade63bae5f6025ac85c7d03fe47a7ca0e58af"
+  integrity sha512-lSquqZCHxDfuTg/Sk2hiS0mcSFCEBuj49JfzPHJogDBT0mGCyY5A1AQzBWngitrp7i1/HAZpIgzF/VjhOEIJIg==
 
-"@csstools/css-tokenizer@^2.4.1":
-  version "2.4.1"
-  resolved "https://registry.yarnpkg.com/@csstools/css-tokenizer/-/css-tokenizer-2.4.1.tgz#1d8b2e200197cf5f35ceb07ca2dade31f3a00ae8"
-  integrity sha512-eQ9DIktFJBhGjioABJRtUucoWR2mwllurfnM8LuNGAqX3ViZXaUchqk+1s7jjtkFiT9ySdACsFEA3etErkALUg==
+"@csstools/css-tokenizer@^3.0.0":
+  version "3.0.1"
+  resolved "https://registry.yarnpkg.com/@csstools/css-tokenizer/-/css-tokenizer-3.0.1.tgz#9dd9b10084f3011290f96789598091e5bcb3c29a"
+  integrity sha512-UBqaiu7kU0lfvaP982/o3khfXccVlHPWp0/vwwiIgDF0GmqqqxoiXC/6FCjlS9u92f7CoEz6nXKQnrn1kIAkOw==
 
-"@csstools/media-query-list-parser@^2.1.13":
-  version "2.1.13"
-  resolved "https://registry.yarnpkg.com/@csstools/media-query-list-parser/-/media-query-list-parser-2.1.13.tgz#f00be93f6bede07c14ddf51a168ad2748e4fe9e5"
-  integrity sha512-XaHr+16KRU9Gf8XLi3q8kDlI18d5vzKSKCY510Vrtc9iNR0NJzbY9hhTmwhzYZj/ZwGL4VmB3TA9hJW0Um2qFA==
+"@csstools/media-query-list-parser@^3.0.0":
+  version "3.0.1"
+  resolved "https://registry.yarnpkg.com/@csstools/media-query-list-parser/-/media-query-list-parser-3.0.1.tgz#9474e08e6d7767cf68c56bf1581b59d203360cb0"
+  integrity sha512-HNo8gGD02kHmcbX6PvCoUuOQvn4szyB9ca63vZHKX5A81QytgDG4oxG4IaEfHTlEZSZ6MjPEMWIVU+zF2PZcgw==
 
-"@csstools/selector-specificity@^3.1.1":
-  version "3.1.1"
-  resolved "https://registry.yarnpkg.com/@csstools/selector-specificity/-/selector-specificity-3.1.1.tgz#63085d2995ca0f0e55aa8b8a07d69bfd48b844fe"
-  integrity sha512-a7cxGcJ2wIlMFLlh8z2ONm+715QkPHiyJcxwQlKOz/03GPw1COpfhcmC9wm4xlZfp//jWHNNMwzjtqHXVWU9KA==
+"@csstools/selector-specificity@^4.0.0":
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/@csstools/selector-specificity/-/selector-specificity-4.0.0.tgz#7dfccb9df5499e627e7bfdbb4021a06813a45dba"
+  integrity sha512-189nelqtPd8++phaHNwYovKZI0FOzH1vQEE3QhHHkNIGrg5fSs9CbYP3RvfEH5geztnIA9Jwq91wyOIwAW5JIQ==
 
 "@cyclonedx/cyclonedx-library@^6.11.0":
   version "6.11.0"
@@ -2934,10 +2934,10 @@
     redux-thunk "^3.1.0"
     reselect "^5.1.0"
 
-"@remix-run/router@1.19.0":
-  version "1.19.0"
-  resolved "https://registry.yarnpkg.com/@remix-run/router/-/router-1.19.0.tgz#745dbffbce67f05386d57ca22c51dfd85c979593"
-  integrity sha512-zDICCLKEwbVYTS6TjYaWtHXxkdoUvD/QXvyVZjGCsWz5vyH7aFeONlPffPdW+Y/t6KT0MgXb2Mfjun9YpWN1dA==
+"@remix-run/router@1.19.1":
+  version "1.19.1"
+  resolved "https://registry.yarnpkg.com/@remix-run/router/-/router-1.19.1.tgz#984771bfd1de2715f42394c87fb716c1349e014f"
+  integrity sha512-S45oynt/WH19bHbIXjtli6QmwNYvaz+vtnubvNpNDvUOoA/OWh6j1OikIP3G+v5GHdxyC6EXoChG3HgYGEUfcg==
 
 "@sinclair/typebox@^0.27.8":
   version "0.27.8"
@@ -6192,13 +6192,6 @@ debug@^3.2.6, debug@^3.2.7:
   dependencies:
     ms "^2.1.1"
 
-debug@^4.3.5:
-  version "4.3.5"
-  resolved "https://registry.yarnpkg.com/debug/-/debug-4.3.5.tgz#e83444eceb9fedd4a1da56d671ae2446a01a6e1e"
-  integrity sha512-pt0bNEmneDIvdL1Xsd9oDQ/wrQRkXDT4AUWlNZNPKvW5x/jyO9VFXkJUP07vQ2upmw5PlaITaPKc31jK13V+jg==
-  dependencies:
-    ms "2.1.2"
-
 debug@^4.3.6:
   version "4.3.6"
   resolved "https://registry.yarnpkg.com/debug/-/debug-4.3.6.tgz#2ab2c38fbaffebf8aa95fdfe6d88438c7a13c52b"
@@ -8877,7 +8870,7 @@ graphemer@^1.4.0:
     react "18.3.1"
     react-dom "18.2.0"
     react-router-bootstrap "0.26.3"
-    react-router-dom "6.26.0"
+    react-router-dom "6.26.1"
     reflux "0.2.13"
     styled-components "6.1.1"
     typescript "5.5.4"
@@ -9383,6 +9376,11 @@ ignore@^5.3.1:
   resolved "https://registry.yarnpkg.com/ignore/-/ignore-5.3.1.tgz#5073e554cd42c5b33b394375f538b8593e34d4ef"
   integrity sha512-5Fytz/IraMjqpwfd34ke28PTVMjZjJG2MPn5t7OE4eUCUNf8BAa7b5WUS9/Qvr6mwOQS7Mk6vdsMno5he+T8Xw==
 
+ignore@^5.3.2:
+  version "5.3.2"
+  resolved "https://registry.yarnpkg.com/ignore/-/ignore-5.3.2.tgz#3cd40e729f3643fd87cb04e50bf0eb722bc596f5"
+  integrity sha512-hsBTNUqQTDwkWtcdYI2i06Y/nUBEsNEDJKjWdigLvegy8kDuJAS8uRlpkkcQpyEXL0Z/pjDy5HBmMjRCJ2gq+g==
+
 image-size@~0.5.0:
   version "0.5.5"
   resolved "https://registry.yarnpkg.com/image-size/-/image-size-0.5.5.tgz#09dfd4ab9d20e29eb1c3e80b8990378df9e3cb9c"
@@ -11406,10 +11404,10 @@ map-visit@^1.0.0:
   dependencies:
     object-visit "^1.0.0"
 
-marked@^13.0.0:
-  version "13.0.1"
-  resolved "https://registry.yarnpkg.com/marked/-/marked-13.0.1.tgz#38386e1ebe9c09bb4db72c8ed9759411cb80fd43"
-  integrity sha512-7kBohS6GrZKvCsNXZyVVXSW7/hGBHe49ng99YPkDCckSUrrG7MSFLCexsRxptzOmyW2eT5dySh4Md1V6my52fA==
+marked@^14.0.0:
+  version "14.0.0"
+  resolved "https://registry.yarnpkg.com/marked/-/marked-14.0.0.tgz#79a1477358a59e0660276f8fec76de2c33f35d83"
+  integrity sha512-uIj4+faQ+MgHgwUW1l2PsPglZLOLOT1uErt06dAPtx2kjteLAkbsd/0FiYg/MGS+i7ZKLb7w2WClxHkzOOuryQ==
 
 material-colors@^1.2.1:
   version "1.2.6"
@@ -11417,9 +11415,9 @@ material-colors@^1.2.1:
   integrity sha512-6qE4B9deFBIa9YSpOc9O0Sgc43zTeVYbgDT5veRKSlB2+ZuHNoVVxA1L/ckMUayV9Ay9y7Z/SZCLcGteW9i7bg==
 
 material-symbols@^0.22.0:
-  version "0.22.0"
-  resolved "https://registry.yarnpkg.com/material-symbols/-/material-symbols-0.22.0.tgz#1e1b4c0e3f37e4e4768744a98cdb163536342ee0"
-  integrity sha512-SrfUYKNdOFhfpQ84slrcLSFIbFZQ24IuF17jaM6uS2pIyVOd1rnzyWqjK8vGzpuzFO/1gYDH2aJb8b1TPC0Ggw==
+  version "0.22.1"
+  resolved "https://registry.yarnpkg.com/material-symbols/-/material-symbols-0.22.1.tgz#a7254674a0ee4d4ad6667f5702d5fdbf9761dc8a"
+  integrity sha512-MWZB/53EMWzL3RYpr7plQRAWuqW73C/21PhvSwh/dptEGUk7SpG8h45eCqe37wfQoq6YZvuYfwLEYGfK2dgUqQ==
 
 math-log2@^1.0.1:
   version "1.0.1"
@@ -12740,10 +12738,10 @@ postcss-modules-values@^4.0.0:
   dependencies:
     icss-utils "^5.0.0"
 
-postcss-resolve-nested-selector@^0.1.1:
-  version "0.1.1"
-  resolved "https://registry.yarnpkg.com/postcss-resolve-nested-selector/-/postcss-resolve-nested-selector-0.1.1.tgz#29ccbc7c37dedfac304e9fff0bf1596b3f6a0e4e"
-  integrity sha1-Kcy8fDfe36wwTp//C/FZaz9qDk4=
+postcss-resolve-nested-selector@^0.1.6:
+  version "0.1.6"
+  resolved "https://registry.yarnpkg.com/postcss-resolve-nested-selector/-/postcss-resolve-nested-selector-0.1.6.tgz#3d84dec809f34de020372c41b039956966896686"
+  integrity sha512-0sglIs9Wmkzbr8lQwEyIzlDOOC9bGmfVKcJTaxv3vMmd3uo4o4DerC3En0bnmgceeql9BfC8hRkp7cg0fjdVqw==
 
 postcss-safe-parser@^7.0.0:
   version "7.0.0"
@@ -12769,10 +12767,10 @@ postcss-selector-parser@^6.0.4:
     uniq "^1.0.1"
     util-deprecate "^1.0.2"
 
-postcss-selector-parser@^6.1.0:
-  version "6.1.0"
-  resolved "https://registry.yarnpkg.com/postcss-selector-parser/-/postcss-selector-parser-6.1.0.tgz#49694cb4e7c649299fea510a29fa6577104bcf53"
-  integrity sha512-UMz42UD0UY0EApS0ZL9o1XnLhSTtvvvLe5Dc2H2O56fvRZi+KulDyf5ctDhhtYJBGKStV2FL1fy6253cmLgqVQ==
+postcss-selector-parser@^6.1.2:
+  version "6.1.2"
+  resolved "https://registry.yarnpkg.com/postcss-selector-parser/-/postcss-selector-parser-6.1.2.tgz#27ecb41fb0e3b6ba7a1ec84fff347f734c7929de"
+  integrity sha512-Q8qQfPiZ+THO/3ZrOrO0cJJKfpYCagtMUkXbnEfmgUjwXg6z/WBeOyS9APBBPCTSiDV+s4SwQGu8yFsiMRIudg==
   dependencies:
     cssesc "^3.0.0"
     util-deprecate "^1.0.2"
@@ -12798,19 +12796,19 @@ postcss@^8.4.31, postcss@^8.4.33:
     picocolors "^1.0.0"
     source-map-js "^1.0.2"
 
-postcss@^8.4.39:
-  version "8.4.39"
-  resolved "https://registry.yarnpkg.com/postcss/-/postcss-8.4.39.tgz#aa3c94998b61d3a9c259efa51db4b392e1bde0e3"
-  integrity sha512-0vzE+lAiG7hZl1/9I8yzKLx3aR9Xbof3fBHKunvMfOCYAtMhrsnccJY2iTURb9EZd5+pLuiNV9/c/GZJOHsgIw==
+postcss@^8.4.41:
+  version "8.4.41"
+  resolved "https://registry.yarnpkg.com/postcss/-/postcss-8.4.41.tgz#d6104d3ba272d882fe18fc07d15dc2da62fa2681"
+  integrity sha512-TesUflQ0WKZqAvg52PWL6kHgLKP6xB6heTOdoYM0Wt2UHyxNa4K25EZZMgKns3BH1RLVbZCREPpLY0rhnNoHVQ==
   dependencies:
     nanoid "^3.3.7"
     picocolors "^1.0.1"
     source-map-js "^1.2.0"
 
 posthog-js@^1.52.0:
-  version "1.141.4"
-  resolved "https://registry.yarnpkg.com/posthog-js/-/posthog-js-1.141.4.tgz#c3fcc8bf312c8baaed2b9032cd5fb527a712283b"
-  integrity sha512-e8rUFEnAR1MB+YqrjWLEmvm0d1X90cebCPNyby6oNX1cp36s/PpxeTx+Up7bArJmRv2N+rT1Kd5sJ7jpXWAonA==
+  version "1.155.4"
+  resolved "https://registry.yarnpkg.com/posthog-js/-/posthog-js-1.155.4.tgz#611a63cf95b8fa908b3b50b1043cbdcb4c2a712b"
+  integrity sha512-suxwAsmZGqMDXJe/RaCKI3PaDEHiuMDDhKcJklgGAg7eDnywieRkr5CoPcOOvnqTDMnuOPETr98jpYBXKUwGFQ==
   dependencies:
     fflate "^0.4.8"
     preact "^10.19.3"
@@ -13008,9 +13006,9 @@ qs@6.11.0:
     side-channel "^1.0.4"
 
 qs@^6.3.0:
-  version "6.12.1"
-  resolved "https://registry.yarnpkg.com/qs/-/qs-6.12.1.tgz#39422111ca7cbdb70425541cba20c7d7b216599a"
-  integrity sha512-zWmv4RSuB9r2mYQw3zxQuHWeU+42aKi1wWig/j4ele4ygELZ7PEO6MM7rim9oAQH2A5MWfsAVf/jPvTPgCbvUQ==
+  version "6.13.0"
+  resolved "https://registry.yarnpkg.com/qs/-/qs-6.13.0.tgz#6ca3bd58439f7e245655798997787b0d88a51906"
+  integrity sha512-+38qI9SOr8tfZ4QmJNplMUxqjbe7LKvvZgWdExBOmd+egZTtjLB67Gu0HRX3u/XOq7UU2Nx6nsjvS16Z9uwfpg==
   dependencies:
     side-channel "^1.0.6"
 
@@ -13367,20 +13365,20 @@ react-router-bootstrap@0.26.3:
   dependencies:
     prop-types "^15.7.2"
 
-react-router-dom@6.26.0:
-  version "6.26.0"
-  resolved "https://registry.yarnpkg.com/react-router-dom/-/react-router-dom-6.26.0.tgz#8debe13295c58605c04f93018d659a763245e58c"
-  integrity sha512-RRGUIiDtLrkX3uYcFiCIxKFWMcWQGMojpYZfcstc63A1+sSnVgILGIm9gNUA6na3Fm1QuPGSBQH2EMbAZOnMsQ==
+react-router-dom@6.26.1:
+  version "6.26.1"
+  resolved "https://registry.yarnpkg.com/react-router-dom/-/react-router-dom-6.26.1.tgz#a408892b41767a49dc94b3564b0e7d8e3959f623"
+  integrity sha512-veut7m41S1fLql4pLhxeSW3jlqs+4MtjRLj0xvuCEXsxusJCbs6I8yn9BxzzDX2XDgafrccY6hwjmd/bL54tFw==
   dependencies:
-    "@remix-run/router" "1.19.0"
-    react-router "6.26.0"
+    "@remix-run/router" "1.19.1"
+    react-router "6.26.1"
 
-react-router@6.26.0:
-  version "6.26.0"
-  resolved "https://registry.yarnpkg.com/react-router/-/react-router-6.26.0.tgz#d5af4c46835b202348ef2b7ddacd32a2db539fde"
-  integrity sha512-wVQq0/iFYd3iZ9H2l3N3k4PL8EEHcb0XlU2Na8nEwmiXgIUElEH6gaJDtUQxJ+JFzmIXaQjfdpcGWaM6IoQGxg==
+react-router@6.26.1:
+  version "6.26.1"
+  resolved "https://registry.yarnpkg.com/react-router/-/react-router-6.26.1.tgz#88c64837e05ffab6899a49df2a1484a22471e4ce"
+  integrity sha512-kIwJveZNwp7teQRI5QmwWo39A5bXRyqpH0COKKmPnyD2vBvDwgFXSqDUYtt1h+FEyfnE8eXr7oe0MxRzVwCcvQ==
   dependencies:
-    "@remix-run/router" "1.19.0"
+    "@remix-run/router" "1.19.1"
 
 react-select-event@5.5.1:
   version "5.5.1"
@@ -15102,7 +15100,7 @@ styled-components@6.1.1:
   version "1.0.0"
   dependencies:
     postcss-styled-syntax "0.6.4"
-    stylelint "16.7.0"
+    stylelint "16.8.2"
     stylelint-config-recommended "14.0.1"
     stylelint-config-standard "36.0.1"
     stylelint-config-styled-components "0.1.1"
@@ -15124,22 +15122,22 @@ stylelint-config-styled-components@0.1.1:
   resolved "https://registry.yarnpkg.com/stylelint-config-styled-components/-/stylelint-config-styled-components-0.1.1.tgz#b408388d7c687833ab4be4c4e6522d97d2827ede"
   integrity sha512-z5Xz/9GmvxO6e/DLzBMwkB85zHxEEjN6K7Cj80Bi+o/9vR9eS3GX3E9VuMnX9WLFYulqbqLtTapGGY28JBiy9Q==
 
-stylelint@16.7.0:
-  version "16.7.0"
-  resolved "https://registry.yarnpkg.com/stylelint/-/stylelint-16.7.0.tgz#5f6acf516aedecba7a6472ba0cc1ffc20e2be86b"
-  integrity sha512-Q1ATiXlz+wYr37a7TGsfvqYn2nSR3T/isw3IWlZQzFzCNoACHuGBb6xBplZXz56/uDRJHIygxjh7jbV/8isewA==
+stylelint@16.8.2:
+  version "16.8.2"
+  resolved "https://registry.yarnpkg.com/stylelint/-/stylelint-16.8.2.tgz#7fda18b919a36e206e897417d4720baceb3af122"
+  integrity sha512-fInKATippQhcSm7AB+T32GpI+626yohrg33GkFT/5jzliUw5qhlwZq2UQQwgl3HsHrf09oeARi0ZwgY/UWEv9A==
   dependencies:
-    "@csstools/css-parser-algorithms" "^2.7.1"
-    "@csstools/css-tokenizer" "^2.4.1"
-    "@csstools/media-query-list-parser" "^2.1.13"
-    "@csstools/selector-specificity" "^3.1.1"
+    "@csstools/css-parser-algorithms" "^3.0.0"
+    "@csstools/css-tokenizer" "^3.0.0"
+    "@csstools/media-query-list-parser" "^3.0.0"
+    "@csstools/selector-specificity" "^4.0.0"
     "@dual-bundle/import-meta-resolve" "^4.1.0"
     balanced-match "^2.0.0"
     colord "^2.9.3"
     cosmiconfig "^9.0.0"
     css-functions-list "^3.2.2"
     css-tree "^2.3.1"
-    debug "^4.3.5"
+    debug "^4.3.6"
     fast-glob "^3.3.2"
     fastest-levenshtein "^1.0.16"
     file-entry-cache "^9.0.0"
@@ -15147,7 +15145,7 @@ stylelint@16.7.0:
     globby "^11.1.0"
     globjoin "^0.1.4"
     html-tags "^3.3.1"
-    ignore "^5.3.1"
+    ignore "^5.3.2"
     imurmurhash "^0.1.4"
     is-plain-object "^5.0.0"
     known-css-properties "^0.34.0"
@@ -15156,10 +15154,10 @@ stylelint@16.7.0:
     micromatch "^4.0.7"
     normalize-path "^3.0.0"
     picocolors "^1.0.1"
-    postcss "^8.4.39"
-    postcss-resolve-nested-selector "^0.1.1"
+    postcss "^8.4.41"
+    postcss-resolve-nested-selector "^0.1.6"
     postcss-safe-parser "^7.0.0"
-    postcss-selector-parser "^6.1.0"
+    postcss-selector-parser "^6.1.2"
     postcss-value-parser "^4.2.0"
     resolve-from "^5.0.0"
     string-width "^4.2.3"
diff --git a/pom.xml b/pom.xml
index 3728ffbecc52..9f205a7b3e62 100644
--- a/pom.xml
+++ b/pom.xml
@@ -103,7 +103,7 @@
         <aws-kinesis-client.version>2.6.0</aws-kinesis-client.version>
         <aws-msk-iam-auth.version>2.2.0</aws-msk-iam-auth.version>
         <bouncycastle.version>1.78.1</bouncycastle.version>
-        <byte-buddy.version>1.14.18</byte-buddy.version>
+        <byte-buddy.version>1.14.19</byte-buddy.version>
         <caffeine.version>3.1.8</caffeine.version>
         <cef-parser.version>0.0.1.10</cef-parser.version>
         <classgraph.version>4.8.174</classgraph.version>
@@ -123,7 +123,7 @@
         <grok.version>0.1.9-graylog-3</grok.version>
         <grpc.version>1.65.1</grpc.version>
         <guava-retrying.version>2.0.0</guava-retrying.version>
-        <guava.version>33.2.1-jre</guava.version>
+        <guava.version>33.3.0-jre</guava.version>
         <guice.version>7.0.0</guice.version>
         <HdrHistogram.version>2.2.2</HdrHistogram.version>
         <hamcrest.version>3.0</hamcrest.version>
@@ -150,7 +150,7 @@
         <kafka09.version>0.9.0.1-7</kafka09.version>
         <log4j.version>2.23.1</log4j.version>
         <lucene.version>9.11.1</lucene.version>
-        <metrics.version>4.2.26</metrics.version>
+        <metrics.version>4.2.27</metrics.version>
         <mongodb-driver.version>5.1.3</mongodb-driver.version>
         <mongojack.version>4.11.0</mongojack.version>
         <natty.version>0.13</natty.version>
@@ -194,7 +194,7 @@
         <equalsverifier.version>3.16.1</equalsverifier.version>
         <jukito.version>1.5</jukito.version>
         <junit.version>4.13.2</junit.version>
-        <junit-jupiter.version>5.10.3</junit-jupiter.version>
+        <junit-jupiter.version>5.11.0</junit-jupiter.version>
         <mockito.version>5.12.0</mockito.version>
         <restassured.version>5.5.0</restassured.version>
         <system-rules.version>1.19.0</system-rules.version>
@@ -599,12 +599,12 @@
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>
                     <artifactId>maven-surefire-plugin</artifactId>
-                    <version>3.3.1</version>
+                    <version>3.4.0</version>
                 </plugin>
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>
                     <artifactId>maven-failsafe-plugin</artifactId>
-                    <version>3.3.1</version>
+                    <version>3.4.0</version>
                 </plugin>
                 <plugin>
                     <groupId>org.codehaus.mojo</groupId>