While troubleshooting, maintaining Aria Operations for Logs cluster nodes, it is important that you are aware of the list of disruptive actions that could impact historical data.
Aria Operations for Logs
You should avoid below changes into the product, to safeguard metrics/data stored :
From CLI/ssh standpoint, you should avoid running any : cp, mv, rm, dd, vi, DB commands without prior taking VM snapshot or backup.
For more info about snapshots, please refer to this How to take snapshots for Aria Operations for Logs