Remove Indices Folder in elasticsearch, how to connect back kibana and logstash?

Elastic Stack Elasticsearch
1

Hi all,

Good day, recently I have setup a new ELKStack server, and the D: drive is full, so I have removed the indices folder from the elasticsearch\data folder. After that only I realised I should not remove the indices folder but should remove those old indices via API.

Anyhow, the data is not really important, but how do I connect back the Kibana and Logstash to elasticsearch? I notice there are some error, security index is unavailable...

Worst case is I need to re-setup the whole things, but before this, any solutions?
Note: I do not have any backup of the data folder.

Many thanks!

2

If you have any snapshots or backups, you may be able to recover. Otherwise, you probably need to set up the cluster and reindex your data from its original source.

1 Like
3

I do not have any snapshots or backups. How do I bring up the Logstash and Kibana? Now both not able to start.

4

Since you manually removed data from the data folder you probably removed data that could not have been removed.

You will need to setup your cluster again, this will be an entirely new cluster with fresh data.

2 Likes
5

Owh... okay. Seemed like no choice but to re-setup everything again :smiling_face_with_tear:.
Many thanks for the help and information.