Question on Elasticsearch Tuning

[JohnOmernik]

Question on Elasticsearch Tuning

Request Type

Feature Request

Work Environment

NA/General Question/Feature

Problem Description

When the Elasticsearch index is created, what is the default setup for indexes (number of shards, replicas, etc). Can this be a tunable thing? For example, if I am using a ES cluster that has 4 nodes, could I ensure that I can take any node down for maintenance by increasing the number of default replicas when thehive creates its indexes for the first time?

Possible Solutions

Configuration items allowing for sane defaults and more control over creation parameters. (Also documentation on them.)

Complementary information

[To-om]

Currently, index is created using default settings (number_of_shard: 5, number_of_replicas: 1).

After index creation it is possible to update the number of replicas. I think that number of shards can't be modified without reindexing all data.

I'll add settings in TheHive configuration to specify index settings.

[To-om]

I've created an issue TheHive-Project/elastic4play#9 for that.