I'm trying to think of a better approach than this (bearing in mind our application and logs and ES is on-prem):
a) Customer sends an
elasticdump of their data and their indexes will be in the format of
b) We use
elasticdump to import this into our local ES to analyse logs.
c) Call the REINDEX api to rename their indexes CustomerFoo-YYYYMMDD
(As a side note you can call the REINDEX API with a source of
fluentd* and it will merge all indexes into the destination - https://www.elastic.co/guide/en/elasticsearch/reference/6.2/docs-reindex.html)
Can anyone think of a better way where they can export their data and we can reimport with a specific index name?