I was wondering if there was a way to keep copies of closed indices offline.
For example, I will be closing indices after they are no longer being written to to save on resources. I need to be able to take a copy of that data from Elasticsearch. This copy will be kept away from the server running Elasticsearch for security purposes. When the logs need to be viewed again we need to be able to reload the logs in Elasticsearch for analysis.
Is there a way to do this without X-pack?
Thanks!