Nagios Support Forum

we extend cluster to 8 node, but index shards in "Cluster status" still show 5, it's correct?

Yes, each index always has 5 primary shards and 5 backup shards (a replica). Each of these shards are distributed between the 8 nodes in your cluster (making sure each primary and backup shard are always on different nodes), and all shards participate in returning search results.

scottwilkerson wrote:Yes, each index always has 5 primary shards and 5 backup shards (a replica). Each of these shards are distributed between the 8 nodes in your cluster (making sure each primary and backup shard are always on different nodes), and all shards participate in returning search results.

our index has 300GB ~ 350GB per day, 5 shards it's mean each shard size about 60GB, is no issue about performance ?

No, this shouldn't be a problem.

cdienger wrote:No, this shouldn't be a problem.

if i want to increase shards number to 10, how to do that?

It can be set in /usr/local/nagioslogserver/elasticsearch/config/elasticsearch.yml but please note that this file can be overwritten during upgrades and we recommend the default value of 5 shards per index.

cdienger wrote:It can be set in /usr/local/nagioslogserver/elasticsearch/config/elasticsearch.yml but please note that this file can be overwritten during upgrades and we recommend the default value of 5 shards per index.

ok, thanks for you help and notice. let me test is different at 5 to 10 shards.

Sounds good. Let us know your results.

i change shards to 11,it's work, the query speed has been improved.

Thanks for the update!