# ElasticSearch Data Redirection

**URL:** <https://discuss.elastic.co/t/elasticsearch-data-redirection/286036>\
**Category:** Elasticsearch\
**Created:** [October 6, 2021, 1:33pm UTC](https://discuss.elastic.co/t/elasticsearch-data-redirection/286036 "2021-10-06T13:33:26Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![jrpayne30506](https://avatars.discourse-cdn.com/v4/letter/j/e9bcb4/32.png) [@jrpayne30506](https://discuss.elastic.co/u/jrpayne30506)\
**Post date:** [October 6, 2021, 1:33pm UTC](https://discuss.elastic.co/t/elasticsearch-data-redirection/286036/1 "2021-10-06T13:33:26Z")

</div>

Hello All,

New to Elasticsearch here and having an issue. I have an Ubuntu server (18.04) that I am using to send some security and firewall logs for period of retentions storage. I found an article on how to redirect the logs from Elasticsearch to mapped network drive where there is plenty of storage. It appears that this worked for about a day and stopped. All of the log folders created by the redirection, have the same date. The size of the directory is not changing so it is apparent that the logs are no longer being sent there or something else is going on. I was wondering if anyone might have an idea as to why the redirection of the logs might stop? There is still many TB of storage on the drive and the .yml file has not been changed since the it was edited to to redirect the logs. Any advice would be greatly appreciated.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 11, 2021, 1:05am UTC](https://discuss.elastic.co/t/elasticsearch-data-redirection/286036/2 "2021-10-11T01:05:18Z")

</div>

Welcome to our community! 😃

> [@jrpayne30506](#):
>
> I found an article on how to redirect the logs from Elasticsearch to mapped network drive where there is plenty of storage.

It'd be useful if you could share that article, or what you did to apply that article to your setup.

---

<div class="post-metadata">

**Author:** ![jrpayne30506](https://avatars.discourse-cdn.com/v4/letter/j/e9bcb4/32.png) [@jrpayne30506](https://discuss.elastic.co/u/jrpayne30506)\
**Post date:** [October 13, 2021, 12:58pm UTC](https://discuss.elastic.co/t/elasticsearch-data-redirection/286036/3 "2021-10-13T12:58:02Z")

</div>

I will try to find and post a link to the article I read and follow. Basically it directed me to edit the elasticsearch.yml file with the path to the external drive. I did so and it appeared to work briefly because I do have files/logs in that directory but for some reason it just stopped and I cant figure out what happened. My yml looks like this now:

path.data: /var/lib/elasticsearch  
#path.data: /media/powervault

# 

# Path to log files:

# 

#path.logs: /var/log/elasticsearch  
path.logs: /media/powervault/log

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 10, 2021, 12:58pm UTC](https://discuss.elastic.co/t/elasticsearch-data-redirection/286036/4 "2021-11-10T12:58:54Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.