Re: Metron Alert UI and zero-down time Elasticsearch re-index

2018-01-14 Thread Ali Nazemian
It would be great if we can have some help on this issue. Cheers, Ali On Sat, Jan 6, 2018 at 12:33 PM, Ali Nazemian wrote: > Hi James, > > Due to changes in the field format, I want to create a new index with the > new format. Create an alias to refer to both new and old index. Then, copy > all

Re: Metron Alert UI and zero-down time Elasticsearch re-index

2018-01-05 Thread Ali Nazemian
Hi James, Due to changes in the field format, I want to create a new index with the new format. Create an alias to refer to both new and old index. Then, copy all the documents from the old index to the new index and use the alias to search through Metron Alert UI and Kibana to avoid any downtime.

Re: Metron Alert UI and zero-down time Elasticsearch re-index

2018-01-03 Thread James Sirota
Hi Ali, I am not sure I understand what you are trying to do. Are you trying to change the name on the old index, add it to the alias, and then re-index and give the new index the name of the old index? 01.01.2018, 22:30, "Ali Nazemian" : > Hi All, > > We are using an older version of Metron A