On a Security Analytics appliance running 8.3.1, after attempting to upgrade to 8.4.x, the server reboots and then comes back up still running version 8.3.1. After logging in to the GUI, the following message is displayed in a pink banner.
Version 8.3.1
There is still legacy meta data that hasn't been overwritten since the upgrade from 8.2.8.
The legacy meta data needs to be deleted before the upgrade can complete. For instructions on how to do this, see How to delete legacy meta data in preparation for upgrading to Security Analytics 8.4.1