Copying / Merging ES indexes from one Cluster to Another

Graylog Central (peer support)
1

Hi there !

We use GL at our company for consolidating Apache Access Logs from 40-50 servers. We are planning a DR site test, that will run for at least 2 weeks. So, this is the situation: I have GL running at the Main Site, and during the DR site test, all logs will be collected there, by a different GL cluster.

Once we switch back to our main site, we will have 2 weeks of “missing” logs and messages. How can I copy/push the indexes/messages stored at DR Site GL to the main GL?

What alternatives/suggestions could you recommend me?

Thanks !!!

2

Depending on the version of Elasticsearch you’re running, you could use the Elasticsearch Reindex API for this.

3

I don’t understand how to achieve what I want to do with this ES feature/functionality.

Thanks in advance

4

You can re-index documents from a remote Elasticsearch cluster: https://www.elastic.co/guide/en/elasticsearch/reference/5.5/docs-reindex.html#reindex-from-remote

5

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.