FAQ: Organization Transfer

If, as a cloud customer, you receive a message when using LogScale that reads:

Your organization is currently being moved to a different cluster. During this querying, dashboards and creation or modification of assets is disabled. You may experience logout and ingest delays. The transfer should be complete within hours.

It means that your LogScale instance is being moved to a different cluster and you will be unable to make changes to configurations, dashboards, packages, or repositories. Querying and dasbhaords will continue to work as normal.

During the transfer:

  • Filter alerts will not run during the transfer, so results will be delayed, but they will be correct and no result will be missed.

  • Standard alerts will not run during the transfer, so results will be delayed and some results will be missed resulting in false negatives if they are outside the search interval of the alert once the transfer has been completed. All results will be correct.

  • Scheduled searches will not run during the transfer, so results will be delayed, but they will be correct. When the scheduled searches are started again, they will only rerun up to the backfill limit (default 5, can be configured lower) number of missed runs.

  • Queries will be blocked when the ingest has been paused until all data has been transferred.