I am new to elasticsearch and figuring out how to setup ELK stack for logging syslog.
I successfully installed all ELK stacks and it works fine. However, after I installed ELK stack, when I reboot, var/log/elasticsearch
is somehow deleted so elasticsearch fails to start.
Why var/log/elasticsearch
is deleted after rebooting system? How should I configure not to delete on rebooting?
Thanks in advance.