Backup Elasticsearch Data - Snapshot and Restore -Let's Deploy a Host Intrusion Detection System #15

[@bilalabudan9645]

hei bro, is that possible if our snapshot we take to external hardisk -> put in other cluster and repo -> restore our snapshot there... ? i have no idea about that. please help if you know. Thanks

[@taylorwalton_socfortress]

Hey Bilal, I have not put this concept into action but in theory I believe it should work. As long as both clusters have access to the external disk then one should be able to write to it while the other can restore. I would just make sure that network connectivity is in place and ensure that the backup cluster doesn’t overwrite the backed up indexes but I don’t think that should be a problem. Let me know if you get something working! Thanks for watching!

[@bilalabudan9645]

@@taylorwalton_socfortress Thanks for your response bro, but that's okay. it's solved, i've done it all and success

[@sravanisasubilli4044]

@@bilalabudan9645 Hi could you please provide related docs/information. I need to take snapshot from one cluster and store those snapshots in one server and restore them from another cluster. Please share how u have done it & succeed.

[@puneethkr-zc6my]

Hi , how we can segregate UAT server indices in development environment to take a copy or backup

[@pulidovpe]

Hi. I would like to know if you've created a Master User. Because I'm using aws cognito and I haven't Stack Management. I'm using aws opensearch with Elasticsearch 7.7

[@tranvanut]

Hello, I would like to know that if you using elasticsearch entreprise or open version. Because my Stack Management 7.10.2 has only Kibana in the list at the left. I have no Ingest, Data, Stack, AlertS and Insights like you. Thanhks very much for your answer.

[@taylorwalton_socfortress]

Hey Tran, yes, I am running the Basic License of Elasticsearch

[@ismailctestc9028]

Nice presentation, I have installed new elastic search server, Taken snapshot from Old server & how to restore this snaphot to new server?

[@marciolima174]

I didn't check the documentation and ended up deleting the var/li/elasticsearch indices as these partitions were full. Soon the kibana returns me "Kibana server is not ready yet" how can I create new indexes or recover?

[@busraduygu7324]

hello, I couldn't understand what you are using as editor. When I enter localhost:9200 from putty, it gives an error. Also, when I try from cmd, an error message is returned that the nano command is invalid. Please help me!

[@taylorwalton_socfortress]

Hey Busra, apologies but I am a little confused by your question. To connect to the server via putty you need to input the IP address of the network interface that is on the server via port 22 (default ssh port). Once on the server I use nano as the text editor which can be installed with "yum install nano". You can also use "vi" as a text editor and that comes default with most Linux distros. Hope that helps and thanks for watching!