Change Deployment to Hot/Warm

Elastic Stack Elasticsearch
1

Hello, I have a Production deployment with 3 nodes.

What I would like to do is change the deployment type to a Hot / Warm deployment so that I can make accessing the most recent logs much faster and keep older logs in a 'warm' environment.

How do I go about doing this?

Do I make a new deployment and use a snapshot from the current deployment and then delete the old deployment?

Thanks so much.

Jennifer

2

You can add tags/attributes to your existing nodes, then set allocation to existing indices based on those at a later point.

https://www.elastic.co/guide/en/elasticsearch/reference/6.4/allocation-awareness.html has more info.