Understood, Thank you.

On Wednesday, July 22, 2015 at 7:13:14 PM UTC-3, Arie wrote:
>
> Juan,
>
> the part in de es config is done by the graylog ihmo, maybe even 
> overridden by it.
>
> You can put a comment (#) in front of that.
>
> And in elasticsearch conf I have this:
> # index.number_of_shards: 1
> # index.number_of_replicas: 0
>
> Arie.
>
> Op woensdag 22 juli 2015 15:03:45 UTC+2 schreef Juan Andres Ramirez:
>>
>> Hello Arie,
>>        In my graylog conf I have this:
>> elasticsearch_shards = 1
>> elasticsearch_replicas = 0
>>
>> And in elasticsearch conf I have this:
>> index.number_of_shards: 1
>> index.number_of_replicas: 0
>>
>> So why I have 16 shards in my cluster Health?, That is my question.
>>
>> Thank you.
>>
>>
>> On Tuesday, July 21, 2015 at 6:25:54 PM UTC-3, Arie wrote:
>>>
>>> Hi Juan,
>>>
>>> IHMO for production having 4 ES nodes 4 shards can be fine. The data 
>>> will be shared on the 4 nodes leaving you
>>> with 4 shards. (one on each node) Turning replicas to 1 wil create 1 
>>> replicated shard for each one there is. This gives you a backup
>>> and improves search speed.
>>>
>>> This is only in count for the new index that will be created if our 
>>> setup is already running, but there are some commands
>>> in es that can make that happen for the current index.
>>> see: 
>>> https://www.elastic.co/guide/en/elasticsearch/reference/1.6/indices-update-settings.html
>>>
>>> Choosing the number of replicas:
>>>
>>> https://www.elastic.co/guide/en/elasticsearch/guide/current/replica-shards.html
>>>
>>> So for backup take one replica, for speed improvement choose 3 when 
>>> having 4 nodes.
>>> Every node is than capable of serving a search request.
>>>
>>> A.
>>>
>>>
>>> Op dinsdag 21 juli 2015 15:19:21 UTC+2 schreef Juan Andres Ramirez:
>>>>
>>>> The cluster health:
>>>>
>>>>
>>>> {
>>>>   "cluster_name" : "elasticsearch",
>>>>   "status" : "yellow",
>>>>   "timed_out" : false,
>>>>   "number_of_nodes" : 2,
>>>>   "number_of_data_nodes" : 1,
>>>>   "active_primary_shards" : 16,
>>>>   "active_shards" : 16,
>>>>   "relocating_shards" : 0,
>>>>   "initializing_shards" : 0,
>>>>   "unassigned_shards" : 1,
>>>>   "delayed_unassigned_shards" : 0,
>>>>   "number_of_pending_tasks" : 0,
>>>>   "number_of_in_flight_fetch" : 0
>>>> }
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> On Tuesday, July 21, 2015 at 9:54:23 AM UTC-3, Juan Andres Ramirez 
>>>> wrote:
>>>>>
>>>>> Hello guys,
>>>>>         I was searching the answer in this group and in the web, but I 
>>>>> can't found the answer.
>>>>>
>>>>> 1- Graylog create 1 shard per indice?, so in this moment I have 17 
>>>>> shards and in my config I have :
>>>>> elasticsearch_shards = 1
>>>>> elasticsearch_replicas = 0
>>>>>
>>>>> So I'm in development phase, I don't need replicas.
>>>>>
>>>>> 2- If I will change in config elasticsearch_shards = 2 , then I'm 
>>>>> going to have 34 shards 2 per index?.
>>>>>
>>>>> My last question, If I'm going to create an Elasticsearch a cluster 
>>>>> with 4 nodes and change the setup elasticsearch_replicas = 1 , I'm going 
>>>>> to 
>>>>> have 17 shard in every node automatically? 
>>>>>
>>>>> I have problem to know how to work the elasticsearch cluster and the 
>>>>> configuration to failover.
>>>>>
>>>>> Thank you.
>>>>>
>>>>

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to