I implemented an ELK Stack in our environment a few days ago and originally created two indexes that I specified in both Logstash configuration files; "logstash_syslogs" and "logstash_netflow".
A few days later I realized that having two separate indexes aren't necessary and won't work out with having one main dashboard to visualize the data. I went ahead and changed the configurations to output to a single "logstash-events" index.
I had over 5 million logs on the old "logstash_syslog" index and was wondering if I can transfer that data over to my new index "logstash-events".
Is this possible?