I tried to reindex .kibana_2(latest) of our production elastic to my local elastic. The problem is that Not all the saved objects have been transferred.
What kind of data .kibana_2 includes? Shouldn't all saved objects be included in .kibana_2?
Everything that's visible under "Saved Objects Management" is stored in the index the .kibana alias points to. So if .kibana points to .kibana_3 you should reindex .kibana_3 and after reindexing point your local .kibana to the reindexed index.
Yes, I should have mentioned that, but you will need to set the mappings of your local index so that it matches your remote .kibana_N index before you start reindexing.
Kibana's Saved Objects rely on fixed mappings for the .kibana_N index, so if you just create a new index and start reindexing the inferred mappings will be incorrect.
Although a remote reindex should work, restoring from a snapshot will be simpler and less error prone, you'll get all the index settings, mappings and aliases from the snapshot instead of having to do this manually.
@rudolf So I should copy the mapping of .kibana_N and put the mapping in which "local index"? .kibana?
Because before reindex I am deleting .kibana index from local elastic, shouldn't I?
I didn't test these instructions, but hopefully this will help you get it right. The complete steps would be something like:
remote: GET /.kibana/_mappings
local: POST /.kibana_1 {"mappings": <mappings from step 1>, "aliases": {".kibana": {}}
local: reindex remote .kibana into local .kibana (using the aliases instead of concrete index will maybe be a little less error prone so you don't accidentally use the wrong index)
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.