1. Describe your incident:
After upgrading to MongoDB 5.0, OpenSearch 2.5, and Graylog 5.0 our previous indices are no longer appearing within Graylog.
2. Describe your environment:
-
OS Information:
Ubuntu 20.04 -
Package Version:
Graylog 5.0.3-1
MongoDB 5.0.15
OpenSearch 2.5.0
3. What steps have you already taken to try and solve the problem?
Our Graylog server build originally followed the documentation to use the tar ball install and place OpenSearch in the path of /graylog/opensearch/. The Graylog 5.0 upgrade suggested to use the Debian package which installs in /usr/share/opensearch/. I moved the indices located in /graylog/opensearch/data/nodes/0/indices to /usr/share/opensearch/data/nodes/0/indices since this is where the new indices are being created.
4. How can the community help?
Is there a method of importing these into Graylog to view our historical data? If so, please provide detailed step by step instructions on how to do so rather than simply linking to a document or KB.