Hi,
I'm trying to think of a better approach than this (bearing in mind our application and logs and ES is on-prem):
a) Customer sends an elasticdump
of their data and their indexes will be in the format of fluend-YYYYMMDD
b) We use elasticdump
to import this into our local ES to analyse logs.
c) Call the REINDEX api to rename their indexes CustomerFoo-YYYYMMDD
(As a side note you can call the REINDEX API with a source of fluentd*
and it will merge all indexes into the destination - https://www.elastic.co/guide/en/elasticsearch/reference/6.2/docs-reindex.html)
Can anyone think of a better way where they can export their data and we can reimport with a specific index name?