Recently I am responsible for our ELK-environment (6.6). It has run for 2 years without any management. For me it's a black box but I'm learning.
First thing I want to tackle is a correct backup solution.
I know elasticsearch is using snapshots. But i have a question about retention.
On daily base I create 1 snapshot and a want a retention of 10 days. Can I remove on the eleventh day the first snapshot, on day 12 the second and so on ... ? Or how do I remove old snapshot without breaking the consistency ?
Thanks in advance.
You can consider a snapshot as a full backup. Which means that you can remove whatever snapshot you want, it won't affect the other snapshots.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.