Hello, currently trying to debug some issues with an ELK stack, where I've moved the db from an instance to the AWS ElasticSearch instance.. Caused a few issues and now i'm generally just wondering about the workflow i should be approaching with snapshotting indices and any requirements..
I currently have 37 days of indices, i'd like to backup and have ongoing management of automated via curator/curator_cli
I'd like to do two things, have every day snapshotted and any indice older than 28 days deleted.
Is daily snapshotting too much? could i also run a snapshot operation every 14 days for the last fortnights indices and a delete operation every 28 days? or does that effect how they're restored? ie. if you snapshot last 14 days of indices do you have to restore them in blocks of 14 days?
Is this sound for backup purposes? For instance if 365 days go by, and say i need to restore all of July 2018's indices, i'll be okay right?