I need to access older data on Graylog, is there a way to read older indexes? Currently we have only one week visible in Graylog. We have configuration for elasticsearch_max_docs_per_index = 20000000, and if I have understood correctly after this limit is reached new index is created for storing log data.
I found several files in /var/lib/elasticsearch/nodes/0/indices -folder, are these possibly the old index files, or how/where are they stored? Dates of files in /indices folder are not so clear, as files are updated on same days…)
Also how can I check the backup/rotation policy for indexes?
Graylog version: Graylog 2.3.2