Help with data recovery!


(Richard Wolford) #1

We had an Elasticsearch server that was reading IIS log files and storing
the data on a remote file share. Everything was working just fine. The
Elasticsearch server then encountered a problem, so we spun up a new one
and pointed it to the same remote file share. However, the new
Elasticsearch server, even though the configuration is 100% identical to
the server that had a problem (and was shut down), it cannot see any of the
data that was previously collected. Kibana is showing "all shards
failed." How do we get this new Elasticsearch server to use the data that
was generated by the old Elasticsearch server (this server cannot be
brought back online btw).

Thanks!

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/0efd41ee-0390-4b1b-bfd7-da93bccc646a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


(James-4) #2

How are you running ES? Installed package? I would copy the data from
/var/lib/elasticsearch to the new server.

On Friday, August 15, 2014 10:24:31 AM UTC-6, Richard Wolford wrote:

We had an Elasticsearch server that was reading IIS log files and storing
the data on a remote file share. Everything was working just fine. The
Elasticsearch server then encountered a problem, so we spun up a new one
and pointed it to the same remote file share. However, the new
Elasticsearch server, even though the configuration is 100% identical to
the server that had a problem (and was shut down), it cannot see any of the
data that was previously collected. Kibana is showing "all shards
failed." How do we get this new Elasticsearch server to use the data that
was generated by the old Elasticsearch server (this server cannot be
brought back online btw).

Thanks!

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/b2e8e94a-3748-4359-a893-ebafe02cf958%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


(system) #3