Please be advised, Graylog is suggesting not to upgrade your OpenSearch Cluster to version 2.14. There are two issues in OpenSearch that will cause two specific issues:
1. Sporatic concurrent_modification_exeptions during query (link)
2. Additional aggregation in search request is changing results. (link)
We are working with the OpenSearch Team to help resolve the issues found in OpenSearch and will update you with more information as it becomes available.
Thank You
Graylog Product Team