Hi Team,
My ES server got corrupted and i have to create a new one, no backup of previous ES server.
But logstash server is as it is, can i recover/ship older logs to my new ES server, how?
Regards...
Depends on how your pipeline is setup.
If you are using file inputs, just delete the sincedb files and it'll start reprocessing.
And what about topbeat and packetbeat data?
Unless you yourself have stored Topbeat and Packetbeat data elsewhere it's lost.