ELK鏡像備份與還原

基於ELK 版本6.2.3
1. 編輯/etc/elasticsearch/elasticsearch.yml 增加配置path.repo: /datastore/elasticsearch/repository

2.註冊倉庫
PUT _snapshot/omni_repo
{
  "type": "fs",
  "settings": {
    "location": "/datastore/elasticsearch/repository" 
  }
}

3.重啓 ELK

4.查看倉庫信息
GET /_snapshot/omni_repo

5.生成快照
PUT /_snapshot/omni_repo/snapshot_1

6.查看快照信息
get _snapshot/omni_repo/snapshot_1
or
get _snapshot/omni_repo/snapshot_1/_status

7. 將快照打包
cd /datastore/elasticsearch/repository
sudo tar -cvzf omni_bak.tar.gz *

8.在其他機器註冊倉庫參照步驟1,步驟2,步驟3

9.將快照壓縮包copy到新的倉庫

10. 恢復
POST /_snapshot/omni_repo/snapshot_1/_restore

11. get /_snapshot/omni_repo/snapshot_1/_status

12.查看恢復狀態
GET _recovery
or
GET _cat/recovery