-
Notifications
You must be signed in to change notification settings - Fork 42
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
e4f08bc
commit 41482de
Showing
2 changed files
with
18 additions
and
25 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,8 +1,8 @@ | ||
--- | ||
layout: article | ||
title: Cold search | ||
title: Cold tier | ||
image: https://dytvr9ot2sszz.cloudfront.net/logz-docs/social-assets/docs-social.jpg | ||
description: Search your archived data before re-ingesting it with Cold search | ||
description: Search your archived data before re-ingesting it with Cold tier | ||
permalink: /user-guide/logs/cold-search.html | ||
sitemap: false | ||
noindex: true | ||
|
@@ -13,6 +13,7 @@ tags: | |
- opensearchdashboards | ||
- logs | ||
- cold search | ||
- cold tier | ||
- search in archive | ||
contributors: | ||
- hidan | ||
|
@@ -21,12 +22,12 @@ contributors: | |
|
||
Archived data usually contains a lot of information, and it can take time and resources to sift through it and find what you’re looking for. | ||
|
||
With Cold search, you can seamlessly search cold storage data you've archived, view up to 1,000 raw logs that match your search query, and get the information you want. You can also re-ingest these logs to your Logz.io account to further analyze and investigate them. | ||
With Cold tier, you can seamlessly search cold storage data you've archived, view up to 1,000 raw logs that match your search query, and get the information you want. You can also re-ingest these logs to your Logz.io account to further analyze and investigate them. | ||
|
||
|
||
![cold search fetched logs](https://dytvr9ot2sszz.cloudfront.net/logz-docs/cold-search/cold-search-close-up.png) | ||
![cold tier fetched logs](https://dytvr9ot2sszz.cloudfront.net/logz-docs/cold-search/cold-search-close-up.png) | ||
|
||
To start using Cold search, navigate to [Log analytics > Cold search](https://app.logz.io/#/dashboard/osd/discover/). | ||
To start using Cold tier, navigate to [Log analytics > Cold tier](https://app.logz.io/#/dashboard/osd/discover/). | ||
|
||
|
||
|
||
|
@@ -35,26 +36,18 @@ To start using Cold search, navigate to [Log analytics > Cold search](https://ap | |
* toc list | ||
{:toc} | ||
|
||
<!-- ### Cold search overview | ||
#### Accessing Cold tier | ||
|
||
Once you've [set up an AWS S3 archive](/user-guide/archive-and-restore/configure-archiving.html) and granted the relevant Cold search permissions, you can start using the feature from the main Log analytics dashboard. | ||
To get started with Cold tier, contact your account manager or [Logz.io's support team](mailto:[email protected]). | ||
|
||
Click on the Cold search button to open the relevant screen. | ||
#### Using Cold tier | ||
|
||
--> | ||
|
||
#### Accessing Cold search | ||
|
||
To get started with Cold search, contact your account manager or [Logz.io's support team](mailto:[email protected]). | ||
|
||
#### Using Cold search | ||
|
||
All users can fetch raw logs from Cold search. However, only **account admins** can re-ingest logs into the account. | ||
All users can fetch raw logs from Cold tier. However, only **account admins** can re-ingest logs into the account. | ||
{:.info-box.important} | ||
|
||
To use Cold search, navigate to [Log analytics](https://app.logz.io/#/dashboard/osd/discover/), choose Cold search from the navigation menu, or click the **Cold Search** button. | ||
To use Cold tier, navigate to [Log analytics](https://app.logz.io/#/dashboard/osd/discover/), choose Cold tier from the navigation menu, or click the **Cold tier** button. | ||
|
||
![cold search nav](https://dytvr9ot2sszz.cloudfront.net/logz-docs/cold-search/cold-search-from-nav.png) | ||
![cold tier nav](https://dytvr9ot2sszz.cloudfront.net/logz-docs/cold-search/cold-search-from-nav.png) | ||
|
||
|
||
Type the search term or query you'd like to use, and choose the relevant time frame. Your search result will only include data matching your exact search term. | ||
|
@@ -88,7 +81,7 @@ Click on **Fetch raw logs** to receive the logs that match your query criteria. | |
|
||
And more. | ||
|
||
![cold search log overviee](https://dytvr9ot2sszz.cloudfront.net/logz-docs/cold-search/cold-search-log-results.png) | ||
![cold tier log overviee](https://dytvr9ot2sszz.cloudfront.net/logz-docs/cold-search/cold-search-log-results.png) | ||
|
||
To investigate the logs further, you can re-ingest them to your Logz.io account by clicking the **Re-ingest** button. | ||
|
||
|
@@ -101,28 +94,28 @@ Once you click the **Re-ingest** button, you'll be asked to confirm your action. | |
|
||
Click **Confirm** to approve and continue with the process. | ||
|
||
![cold search confirm](https://dytvr9ot2sszz.cloudfront.net/logz-docs/cold-search/confirmation-message.png) | ||
![cold tier confirm](https://dytvr9ot2sszz.cloudfront.net/logz-docs/cold-search/confirmation-message.png) | ||
|
||
This process might take a few minutes, during which you can continue using Logz.io. You'll get a notification via email once the process is complete, with a link to the relevant account in OpenSearch Dashboards. | ||
|
||
Your re-ingested logs will be available to search and analyze from OpenSearch Dashboards for a period of **5 days**. | ||
{:.info-box.note} | ||
|
||
|
||
#### Troubleshooting Cold search | ||
#### Troubleshooting Cold tier | ||
|
||
You might encounter an issue while fetching raw logs or re-ingesting them. Here are some common issues that can arise and how you can quickly resolve them: | ||
|
||
##### Issue: Exceeded max limit of restored accounts | ||
|
||
Cold search works with your cold storage archived accounts and has similar limitations. To re-ingest Cold search logs, you must have at least 1 available account in your restored accounts. Note that you can restore up to 5 accounts at a time. | ||
Cold tier works with your cold storage archived accounts and has similar limitations. To re-ingest Cold tier logs, you must have at least 1 available account in your restored accounts. Note that you can restore up to 5 accounts at a time. | ||
|
||
###### Suggested remedy | ||
{:.no_toc} | ||
|
||
Ensure you have at least 1 available account to which you can restore the data. To check how many accounts you use, navigate to [Data Hub > Archive and restore > Restored account](https://app.logz.io/#/dashboard/tools/archive-and-restore) to review if you've exceeded your limit. | ||
|
||
If you have exceeded your restored accounts limit, you can delete one or more accounts to use Cold search. | ||
If you have exceeded your restored accounts limit, you can delete one or more accounts to use Cold tier. | ||
|
||
If you wish to upgrade your existing quota, you can contact [Logz.io's support team](mailto:[email protected]). | ||
|
||
|