I have been implementing an ELK setup for out logging platform and as part of this I decided to do some DR testing. I terminated our master node and it rebuilt automatically, however when it rebuilt it rejoined the cluster as the master node fine, however did not recover any indexes.
I have read a fair bit online and not really found any clear answer here.
Is it possible to have 1 master node, to lose this and to recover all data? If so, how can it be implemented?
The configs are pretty basic, just stating data/master only and also the ec2 discovery settings .