21 views and no replies. Either this is the best kept secret in town, or everyone else is just as baffled as I am? :)
So far I've tried using ElasticDump, The ElasticSearch Exporter and even tried using straight curl. I'm admittedly ignorant to most of these tools in terms of setup. I kind of inherited this and now feel like I have to beat it into submission. Perhaps I'm just going about it wrong? Here was my initial approach: 1) Create a new index on the new ES cluster with the same name as the one on the old cluster 2) Export the index mapping, update the fields (user.name, user.id, session.id, etc) and replace the dots with underscores. 3) Import the updated mapping into the new index 3) Export the index data 4) import said data into new index I can get to step 3. Step 4 fails, and I'm not getting any real explanation as to why. So if you guys have can set my on the right track, that would be handy. On Friday, May 27, 2016 at 4:43:18 PM UTC-4, Robert Hough wrote: > > Recently built a Graylog 2.x cluster, and that seems to be working fine. > I had some questions though, but right now the biggest nagging question has > been... > > How do we migrate our existing indexes over to the new system? The whole > dots in field names issue seems to be what is preventing us from pulling > this off. How do we correct these, and then import them into the our new > system? > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/8a41ef62-8ed4-4b3a-87bd-de02517bdf2d%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
