以下为再kibana 的dev tools里面查询语句
1、查看目前es集群里面有那些快照
GET _snapshot/_all
2、查看 backup 仓库里面 calllog-test-2022-12-13 快照的状态
GET _snapshot/backup/calllog-test-2022-12-13/_status
- 查看快照计划任务
GET /_slm/policy/daily-snapshots?human
4、恢复 backup仓库里面 calllog-test-2022-12-13 快照的 calllogs 索引
POST _snapshot/backup/calllog-test-2022-12-13/_restore
{
"indices": "calllogs",
"ignore_unavailable": true,
"include_global_state": false,
"rename_pattern": "(.+)",
"rename_replacement": "restored_$1",
"include_aliases": false
}
5、查看快照恢复进度
GET /_recovery
6、查看集群的设置
GET /_cluster/settings
7、正则匹配名称中 含有 2022_08 的索引并关闭索引
POST _close
8、删除索引 calllogs
DELETE /calllogs
9、创建快照仓库 my_backup-20221212 ，并指定目录（该目录需要再es配置文件配置）
PUT _snapshot/my_backup-20221212
{
"type": "fs",
"settings": {
"location": "/es_backup/zm-elk-test/",
"compress": true
}
}
10、在快照仓库my_backup-20221212 中创建快照 logs-v2-2022121202 ；快照范围为索引名称 calllogs_v2
PUT _snapshot/my_backup-20221212/logs-v2-2022121202?wait_for_completion=true
{
"indices": "calllogs_v2",
"ignore_unavailable": true,
"include_global_state": true
}
11、在快照仓库my_backup-20221212 的快照名称为 logs-v2-2022121202里面做恢复（恢复指定索引 calllogs_v2 ，注意原来的索引需要先删除再执行恢复，不然会报错）
POST /_snapshot/my_backup-20221212/logs-v2-2022121202/_restore
{
"indices": "calllogs_v2",
"ignore_unavailable": true,
"include_global_state": false
}
12、在快照仓库my_backup-20221212 的快照名称为logs-v2-2022121202 里面做恢复（恢复指定索引 calllogs_v2 到新的索引里面，新的索引名称为 restored_calllogs_v2）
POST _snapshot/my_backup-20221212/logs-v2-2022121202/_restore
{
"indices": "calllogs_v2",
"ignore_unavailable": true,
"include_global_state": false,
"rename_pattern": "(.+)",
"rename_replacement": "restored_$1",
"include_aliases": false
}
13、更改elasticsearch 里面 索引的名称
POST /_reindex
{
"source": {
"index": "restored_calllogs_v2"
},
"dest": {
"index": "calllogs_v2"
}
}
14、删除名称为my_backup-20221212 的快照仓库
DELETE _snapshot/my_backup-20221212
15、es-解除硬盘超过80%限制
PUT /_cluster/settings
{
"transient": {
"cluster.routing.allocation.disk.watermark.low": "90%",
"cluster.routing.allocation.disk.watermark.high": "95%",
"cluster.info.update.interval": "1m"
}
}
#persistent表示为永久修改，重启以后也会保存设置
#transient表示临时修改，重启以后不会保存设置
#"cluster.info.update.interval": "1m" #时间间隔 现在是1分钟，默认是30s
