Skip to content

Commit

Permalink
cold tier
Browse files Browse the repository at this point in the history
  • Loading branch information
Simplychee committed Sep 1, 2023
1 parent e4f08bc commit 41482de
Show file tree
Hide file tree
Showing 2 changed files with 18 additions and 25 deletions.
2 changes: 1 addition & 1 deletion _source/_data/toc.yml
Original file line number Diff line number Diff line change
Expand Up @@ -120,7 +120,7 @@ firstLevel:
url: /user-guide/log-highlighter.html
- title: Log usage measurement
url: /user-guide/log-usage-measurement/
- title: Cold search
- title: Cold Tier
url: /user-guide/logs/cold-search.html


Expand Down
41 changes: 17 additions & 24 deletions _source/user-guide/kibana/cold-search.md
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
---
layout: article
title: Cold search
title: Cold tier
image: https://dytvr9ot2sszz.cloudfront.net/logz-docs/social-assets/docs-social.jpg
description: Search your archived data before re-ingesting it with Cold search
description: Search your archived data before re-ingesting it with Cold tier
permalink: /user-guide/logs/cold-search.html
sitemap: false
noindex: true
Expand All @@ -13,6 +13,7 @@ tags:
- opensearchdashboards
- logs
- cold search
- cold tier
- search in archive
contributors:
- hidan
Expand All @@ -21,12 +22,12 @@ contributors:

Archived data usually contains a lot of information, and it can take time and resources to sift through it and find what you’re looking for.

With Cold search, you can seamlessly search cold storage data you've archived, view up to 1,000 raw logs that match your search query, and get the information you want. You can also re-ingest these logs to your Logz.io account to further analyze and investigate them.
With Cold tier, you can seamlessly search cold storage data you've archived, view up to 1,000 raw logs that match your search query, and get the information you want. You can also re-ingest these logs to your Logz.io account to further analyze and investigate them.


![cold search fetched logs](https://dytvr9ot2sszz.cloudfront.net/logz-docs/cold-search/cold-search-close-up.png)
![cold tier fetched logs](https://dytvr9ot2sszz.cloudfront.net/logz-docs/cold-search/cold-search-close-up.png)

To start using Cold search, navigate to [Log analytics > Cold search](https://app.logz.io/#/dashboard/osd/discover/).
To start using Cold tier, navigate to [Log analytics > Cold tier](https://app.logz.io/#/dashboard/osd/discover/).



Expand All @@ -35,26 +36,18 @@ To start using Cold search, navigate to [Log analytics > Cold search](https://ap
* toc list
{:toc}

<!-- ### Cold search overview
#### Accessing Cold tier

Once you've [set up an AWS S3 archive](/user-guide/archive-and-restore/configure-archiving.html) and granted the relevant Cold search permissions, you can start using the feature from the main Log analytics dashboard.
To get started with Cold tier, contact your account manager or [Logz.io's support team](mailto:[email protected]).

Click on the Cold search button to open the relevant screen.
#### Using Cold tier

-->

#### Accessing Cold search

To get started with Cold search, contact your account manager or [Logz.io's support team](mailto:[email protected]).

#### Using Cold search

All users can fetch raw logs from Cold search. However, only **account admins** can re-ingest logs into the account.
All users can fetch raw logs from Cold tier. However, only **account admins** can re-ingest logs into the account.
{:.info-box.important}

To use Cold search, navigate to [Log analytics](https://app.logz.io/#/dashboard/osd/discover/), choose Cold search from the navigation menu, or click the **Cold Search** button.
To use Cold tier, navigate to [Log analytics](https://app.logz.io/#/dashboard/osd/discover/), choose Cold tier from the navigation menu, or click the **Cold tier** button.

![cold search nav](https://dytvr9ot2sszz.cloudfront.net/logz-docs/cold-search/cold-search-from-nav.png)
![cold tier nav](https://dytvr9ot2sszz.cloudfront.net/logz-docs/cold-search/cold-search-from-nav.png)


Type the search term or query you'd like to use, and choose the relevant time frame. Your search result will only include data matching your exact search term.
Expand Down Expand Up @@ -88,7 +81,7 @@ Click on **Fetch raw logs** to receive the logs that match your query criteria.

And more.

![cold search log overviee](https://dytvr9ot2sszz.cloudfront.net/logz-docs/cold-search/cold-search-log-results.png)
![cold tier log overviee](https://dytvr9ot2sszz.cloudfront.net/logz-docs/cold-search/cold-search-log-results.png)

To investigate the logs further, you can re-ingest them to your Logz.io account by clicking the **Re-ingest** button.

Expand All @@ -101,28 +94,28 @@ Once you click the **Re-ingest** button, you'll be asked to confirm your action.

Click **Confirm** to approve and continue with the process.

![cold search confirm](https://dytvr9ot2sszz.cloudfront.net/logz-docs/cold-search/confirmation-message.png)
![cold tier confirm](https://dytvr9ot2sszz.cloudfront.net/logz-docs/cold-search/confirmation-message.png)

This process might take a few minutes, during which you can continue using Logz.io. You'll get a notification via email once the process is complete, with a link to the relevant account in OpenSearch Dashboards.

Your re-ingested logs will be available to search and analyze from OpenSearch Dashboards for a period of **5 days**.
{:.info-box.note}


#### Troubleshooting Cold search
#### Troubleshooting Cold tier

You might encounter an issue while fetching raw logs or re-ingesting them. Here are some common issues that can arise and how you can quickly resolve them:

##### Issue: Exceeded max limit of restored accounts

Cold search works with your cold storage archived accounts and has similar limitations. To re-ingest Cold search logs, you must have at least 1 available account in your restored accounts. Note that you can restore up to 5 accounts at a time.
Cold tier works with your cold storage archived accounts and has similar limitations. To re-ingest Cold tier logs, you must have at least 1 available account in your restored accounts. Note that you can restore up to 5 accounts at a time.

###### Suggested remedy
{:.no_toc}

Ensure you have at least 1 available account to which you can restore the data. To check how many accounts you use, navigate to [Data Hub > Archive and restore > Restored account](https://app.logz.io/#/dashboard/tools/archive-and-restore) to review if you've exceeded your limit.

If you have exceeded your restored accounts limit, you can delete one or more accounts to use Cold search.
If you have exceeded your restored accounts limit, you can delete one or more accounts to use Cold tier.

If you wish to upgrade your existing quota, you can contact [Logz.io's support team](mailto:[email protected]).

Expand Down

0 comments on commit 41482de

Please sign in to comment.