[graylog2] Backup indices under /var/lib/elasticsearch/graylog2/nodes/0/indices

[Roberto Carna]

People, I have a Graylog 2.1.1 server.

I have several active indices and several closed indices under
/var/lib/elasticsearch/graylog/nodes/0/indices/.

Is it possible to backup the closed indices to a remote file system
(using rsync, ftp or whatever tool), then delete the local closed
indices, and maybe in the future restore the closed indices from the
remote file system to the same directory
/var/lib/elasticsearch/graylog/nodes/0/indices/ in order to open them
again from Graylog at any time and see them in the web interface???

Because the Elasticsearch backup strategy is a bit complicated to me...

Thanks in advance.

Roberto

[Jochen Schalanda]

Hi Roberto,

the only way to get consistent backups of your indices (without shutting
down the whole ES cluster) is using the ES snapshot/restore
API: https://www.elastic.co/guide/en/elasticsearch/reference/2.4/modules-snapshots.html

Cheers,
Jochen

Post by Roberto Carna
People, I have a Graylog 2.1.1 server.
I have several active indices and several closed indices under
/var/lib/elasticsearch/graylog/nodes/0/indices/.
Is it possible to backup the closed indices to a remote file system
(using rsync, ftp or whatever tool), then delete the local closed
indices, and maybe in the future restore the closed indices from the
remote file system to the same directory
/var/lib/elasticsearch/graylog/nodes/0/indices/ in order to open them
again from Graylog at any time and see them in the web interface???
Because the Elasticsearch backup strategy is a bit complicated to me...
Thanks in advance.
Roberto