I'm (trying) to implement a hot/warm architecture using the concept of data tiers.
I have several clusters with a hot/warm/cold architecture working perfectly but the implementation was done based on node.attr.
Now I have this setup for indices with 1 shard, 0 replicas.
Elastic Stack version 7.14
- 3 nodes cluster
siem01 node with roles data_hot, master, data
siem02 node with roles data_warm, master, data
siem03 node with role master
- I've modified my winlogbeat-7.14 index pattern in order to the new index to be created in the data_hot node (siem01). In my understanding to achieve that, I have to put
Is my understanding correct?
Having modified my index pattern, I perform the following test
and I see that new indices are generated also in siem02 node
What is wrong?
Thank you very much in advance