Migrate Graylog Journal/Messages (Single Node) to Multi-Cluster Node

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question.
Don’t forget to select tags to help index your topic!

1. Describe your incident:

Need to migrate from single node to multi-node setup (CE)

Cluster is already up and running pending the data or indices which is needed to be preserved for historical purposes (like 12 months)

Already performed snapshots via API and pending restoration of these snapshots to the new cluster.

the snaphosts are located here /mnt/efs/snapshots

2. Describe your environment:

  • OS Information: Debian12

  • Package Version: CE ver 6.3

  • Service logs, configurations, and environment variables:

single node :

message_journal_dir = /var/lib/graylog-server/journal

multinode:

#Snapshots repo

path.repo: [“/mnt/efs/snapshots”]

Im using AWS EFS as storage, and this is mounted already on both single node and multi node setup.

3. What steps have you already taken to try and solve the problem?

used API curl commands no UI since using a CE

4. How can the community help?

Helpful Posting Tips: Tips for Posting Questions that Get Answers [Hold down CTRL and link on link to open tips documents in a separate tab]