← All case studiesEnergy · Elastic consulting

Case study

Search Infrastructure Moved in Three Hours for a Canadian Energy Producer

How SquareShift moved a Canadian oil and gas producer's 465-index, 1.3-terabyte Elasticsearch cluster to Elastic Cloud, completing the live cutover in under three hours.

Book a session →
Line drawing of a large industrial valve with a hand wheel and a capped outlet on a chain
465indices carried across with every access rule intact
1.3TB of data carried over, with every policy intact
1Azure subscription, merged from a fragmented estate

Client

One of Canada's largest oil and natural gas producers, running mission-critical, real-time ingestion pipelines that needed a more scalable Elasticsearch infrastructure.

Industry

Energy

Services

PePlatform & Software Engineering

Stack

Elasticsearch · Elastic Cloud · Microsoft Azure · Index Lifecycle Management (ILM) · Snapshot Lifecycle Management (SLM)

How SquareShift delivered it.

01

The challenge

The client runs mission-critical, real-time ingestion pipelines that could not be interrupted. Its on-prem cluster carried 465 indices and 1.3 terabytes of data that had to move to Elastic Cloud without losing anything. The client's Azure footprint was also fragmented across multiple subscriptions.

02

What we delivered

Early attempts to back up the data failed security checks, so SquareShift tested and fixed the snapshot process on a separate, non-production cluster first. The team also merged the client's fragmented Azure billing into one subscription.

03

The outcome

The live move then finished in under three hours, carrying over all 465 indices, 1.3 terabytes of data, and every access rule and policy. Planning a similar move? See our Elastic migration services.

“
A failed snapshot on a production cluster is not a rehearsal you get to run twice — proving the backup process on a throwaway cluster first is what makes a three-hour cutover possible instead of a three-day incident.

Platform & Software Engineering Practice Lead, SquareShift

Related work