Migrate one graylog to another graylog

[gsmith]

Hello,

@syntax

1. how does graylog detect the restored index?

Only thing I did with Graylog is restart the service, so yes. Dont have indices with the same name when you do a restore and your good.
Have a look here on that subject, @aaronsachs explains this procedure well.

Elastic Restore Help Please

@mntbighker I’ve not forgotten about this–it’s just taken longer than I expect because my normal day-to-day duties have kept me pretty busy. I want to ensure I understand what you’re expecting to see. My read is that you’re expecting to see the renamed Graylog indices (both those prefixed w/ graylog- and gl_) just show show up in Graylog–is accurate? If so, there’s additional steps that have to happen for an index to show up in Graylog, and those additional steps are what I was unaware of earlie…

As for

@syntax

2. does this process work for multi-node setup?

To be honest, I have not done this on a multi node setup yet. I would image it can be done. If you have a cluster this could be dupicated on each ES node. All I used was scp command to migrate my indices to another node and performed a restore.

NOTE: Make sure the vsersion of Elasticsearch is the same before you do a restore or you might run into trouble.
Hope that helps