# Archive data elastic stack

**URL:** <https://discuss.elastic.co/t/archive-data-elastic-stack/276034>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-searchable-snapshots\
**Created:** [June 15, 2021, 4:57pm UTC](https://discuss.elastic.co/t/archive-data-elastic-stack/276034 "2021-06-15T16:57:44Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![ima](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ima/32/99895_2.png) [@ima](https://discuss.elastic.co/u/ima)\
**Post date:** [June 15, 2021, 4:57pm UTC](https://discuss.elastic.co/t/archive-data-elastic-stack/276034/1 "2021-06-15T16:57:44Z")

</div>

hello everybody can anyone please help me i need to know if it is possible to archive the ELK logs to an external storage off the current platform, and the data will still be searchable. and does anybody know of a method to integrate the ELK data into another SIEM

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 15, 2021, 10:04pm UTC](https://discuss.elastic.co/t/archive-data-elastic-stack/276034/2 "2021-06-15T22:04:50Z")

</div>

[Searchable snapshots | Elasticsearch Guide [7.13] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/searchable-snapshots.html) will do what you want.

Integrating data into other systems depends entirely on if those systems can talk to Elasticsearch or not.

---

<div class="post-metadata">

**Author:** ![ima](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ima/32/99895_2.png) [@ima](https://discuss.elastic.co/u/ima)\
**Post date:** [June 15, 2021, 10:20pm UTC](https://discuss.elastic.co/t/archive-data-elastic-stack/276034/3 "2021-06-15T22:20:05Z")

</div>

thank you so much for your reply, can you suggest me please some Siems that can get integrated to elasticsearch

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 15, 2021, 10:22pm UTC](https://discuss.elastic.co/t/archive-data-elastic-stack/276034/4 "2021-06-15T22:22:47Z")

</div>

The Elastic Stack has a free SIEM in it, why not use that?

---

<div class="post-metadata">

**Author:** ![ima](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ima/32/99895_2.png) [@ima](https://discuss.elastic.co/u/ima)\
**Post date:** [June 15, 2021, 10:26pm UTC](https://discuss.elastic.co/t/archive-data-elastic-stack/276034/5 "2021-06-15T22:26:51Z")

</div>

yes actually we are using elastic siem but we would like know if it is possible to integrate data to use it in another siem

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 15, 2021, 10:36pm UTC](https://discuss.elastic.co/t/archive-data-elastic-stack/276034/6 "2021-06-15T22:36:33Z")

</div>

As I mentioned, the other product would need to be able to talk to Elasticsearch. You'd need to research if they can do that, as we don't keep lists of that.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 13, 2021, 10:36pm UTC](https://discuss.elastic.co/t/archive-data-elastic-stack/276034/7 "2021-07-13T22:36:55Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.