Hello.
I have the next situation.
I have 2 servers on rhel with:
- Graylog 3.3 + ElasticSearch 6.8.5 + Mongo 3
- Graylog 5.2.9 + OpenSearch 2.15.0 + Mongo 7
On both servers all programms work in docker.
I try to migrate data from ElasticSearch to OpenSearch. I’ve already updated ElasticSearch version to 7.0.0. Then made _reindex for necessary indexes:
docker exec graylog_elasticsearch_1 /bin/curl -X POST "127.0.0.1:9200/_reindex" -H 'Content-Type: application/json' -d'
{
"source": {
"index": "graylog_*"
},
"dest": {
"index": "trans_graylog"
}
}
'
Created snapshot:
docker exec graylog_elasticsearch_1 /bin/curl -X PUT '127.0.0.1:9200/_snapshot/backup-trans/2024-07-23-icann?wait_for_completion=true' -H 'Content-Type: application/json' -d'
{
"indices": "trans_icann",
"ignore_unavailable": true,
"include_global_state": true
}
'
And moved it on server with OpenSearch.
This snapshot was successfully restored:
docker exec graylog-opensearch-1 /bin/curl -X POST '127.0.0.1:9200/_snapshot/backup-new/2024-07-23-graylog/_restore' -H 'Content-Type: application/json' -d'
{
"indices": "trans_graylog",
"ignore_unavailable": true,
"include_global_state": true,
"rename_pattern": "trans_graylog",
"rename_replacement": "trans_graylog_0"
}
'
And I could see my new index with data:
docker exec graylog-opensearch-1 /bin/curl -s -X GET '127.0.0.1:9200/_cat/indices?v'
health status index uuid pri rep docs.count docs.deleted store.size pri.store.size
green open trans_icann_0 6nIVruurT9yoR_d3sgj9eA 1 0 17215000 0 21gb 21gb
But I couldn’t see any data in web interface. I’ve tried to create the same index with same settings in web and restart all containers, but there is no result.
What could I check with this issue? I’m a newby with OpenSearch, so have no idea what to do.
Thanks in advance.