Hello, pretty new to ES and everything related to it. Just trying to do a snapshot and only selecting a set of things from 2023 and everything with .xxx in the name as part of it, tons of old data we aren't capable of deleting but don't want in the new cluster.
However, it still seems to be pulling in every index and I'm pretty sure it's just me not knowing how to do this properly. Any help would be appreciated
PUT /_snapshot/prod/prod_onprem_2132023?wait_for_completion=false
{
"type": "azure",
"ignore_unavailable": true,
"include_global_state": true,
"settings": {
"container": "elasticsearch-snapshots",
"base_path" : "prod",
"compress": true,
"readonly": "false",
"indices": ".kibana_1,.kibana_task_manager,.management-beats,.monitoring-*,.watcher-history*,.watches,.security-6,.tasks,.triggered_watches,logstash-bgcs-2023*,logstash-gk-2023*,logstash-wlp-web-2023*,logstash-postfix-2023*,logstash-web-2023*,logstash-ts-2023*,logstash-2023*,wlp-app-2023*,wlp-web-2023*",
"metadata": {
"taken_by": "admin 2/13/2023",
"taken_because": "Snapshot for PROD, select Indices on 2/13/2023"
}
}
}
It returns 'true' and starts the process, however when running the snapshot/current command to view the status it shows all of the indices being processed and not just the ones I listed.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.