UTMStack’s Index Rollover feature ensures optimal data management by automatically deleting indices once they meet specific conditions, such as data size or age.
- Go to
- Set the desired retention period in days.
- Click ‘Save’ to confirm your changes.
- Delete Days: This allows you to define how long the data will be kept. After this period, data is flagged for deletion, which can help in optimizing space and maintaining system performance.
Note: The system automatically takes action when the disk usage reaches 85%, ensuring it doesn’t affect system performance.
- Hot Storage: This is where actively accessed data resides. It’s designed for real-time access, ensuring swift operations.
- Cold Storage: This storage type is meant for archived data. While not regularly accessed, this data is critical for audits, compliance, or retrospective analysis.
Snapshot Archiving is an essential feature for safeguarding data over extended periods. Even as indices are removed based on retention settings, snapshots ensure that a record of this data is retained.
Snapshots are automatically saved to
/utmstack/opensearch/backups. To redirect these snapshots to another drive or remote location:
- Mount the Remote Drive or Different Drive:
sudo mount -t nfs REMOTE-SERVER:/remote/path /utmstack/opensearch/backups
Ensure to replace
REMOTE-SERVER:/remote/path with your actual server and path details.
/etc/fstabfor Persistence: Add the mount details to
/etc/fstabto ensure the remote drive remains mounted after system reboots.
Test the Configuration Ensure that the mount works as expected.
sudo mount -a
While UTMStack doesn’t include Cerebro, the tool is crucial for snapshot management and restoration, enabling the transition of data from cold to hot storage.
- Installation & Access:
- Restoration Process:
- Link Cerebro with your opensearch node for seamless data restoration.
- In the more dropdown menu, select “snapshot”
- in the snapshot view select a repository to restore the backup.