I have general question.
I have elastic on-prem solution in old DC. (that DC will be decommissioned and we cannot move the physical servers)
I need to migrate from one DC (on-prem solution) to another DC (virtual environment).
In the new DC we need only winlogbeat data from 45 servers so configuration will be different then in the old environment (there we also have network logs etc)
So, I am thinking about snaphot and restore, or creating a new cluster in new DC then sync with current cluster and get the logs (we have 15TB of data there - we need the logs because of 3 months retention period).
What would be better option please?
For clustering do I need to have same Elasticsearch version installed on both sides?
Or Is it possible to join Elasticsearch cluster running on centos with cluster running on windows?