# Data tier problem - New Indices not allocating in data\_hot

**URL:** https://discuss.elastic.co/t/data-tier-problem-new-indices-not-allocating-in-data-hot/282498
**Category:** Elasticsearch
**Created:** [August 25, 2021, 2:34pm UTC](https://discuss.elastic.co/t/data-tier-problem-new-indices-not-allocating-in-data-hot/282498 "2021-08-25T14:34:02Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![Anabella\_Cristaldi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anabella_cristaldi/32/23612_2.png) [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)
#### Post date: [August 25, 2021, 2:34pm UTC](https://discuss.elastic.co/t/data-tier-problem-new-indices-not-allocating-in-data-hot/282498/1 "2021-08-25T14:34:02Z")

</div>

Hi,  
I'm (trying) to implement a hot/warm architecture using the concept of data tiers.  
I have several clusters with a hot/warm/cold architecture working perfectly but the implementation was done based on node.attr.  
Now I have this setup for indices with 1 shard, 0 replicas.  
Elastic Stack version 7.14

- 3 nodes cluster  
siem01 node with roles data\_hot, master, data  
siem02 node with roles data\_warm, master, data  
siem03 node with role master

![image](https://us1.discourse-cdn.com/elastic/original/3X/d/e/dedf1a430095d8292c5b01f2ce4afc678461d652.png)

- I've modified my winlogbeat-7.14 index pattern in order to the new index to be created in the data\_hot node (siem01). In my understanding to achieve that, I have to put

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/a/2/a22b83b1e52228f92fbc8505ec6520d4c3511d37.png)

Is my understanding correct?  
Having modified my index pattern, I perform the following test

![image](https://us1.discourse-cdn.com/elastic/original/3X/3/7/37e944624f4f14e173fbb91ad78baee414821a01.png)

and I see that new indices are generated also in siem02 node

![image](https://us1.discourse-cdn.com/elastic/original/3X/6/b/6b91d17e8a8f65d90f37bc840ca9a1095fd3d991.png)

What is wrong?  
Thank you very much in advance  
Regards  
Ana

---

<div class="post-metadata">

### Author: ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)
#### Post date: [August 25, 2021, 3:14pm UTC](https://discuss.elastic.co/t/data-tier-problem-new-indices-not-allocating-in-data-hot/282498/2 "2021-08-25T15:14:45Z")

</div>

The [documentation](https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-node.html#data-node) says that if you set a node role to one of the specialized data roles, like `data_hot` or `data_warm`, the node cannot have the generic `data` role.

> A node can belong to multiple tiers, but a node that has one of the specialized data roles cannot have the generic `data` role.

Your nodes seems to have a specializaed role and the generic data role, for example:  
siem01 node with roles **data\_hot** , master, **data**.

I didn't find in the documentation any information about what would happen if you set a specialized data role as `data_hot` and also the generic `data` role, but I would assume that the generic `data` role would override the specialized `data_hot` role.

This would explain why you have data in both of your nodes with the allocation type set to only `data_hot`.

Can you remove the generic `data` role from your nodes and test it?

---

<div class="post-metadata">

### Author: ![Anabella\_Cristaldi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anabella_cristaldi/32/23612_2.png) [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)
#### Post date: [August 25, 2021, 3:27pm UTC](https://discuss.elastic.co/t/data-tier-problem-new-indices-not-allocating-in-data-hot/282498/3 "2021-08-25T15:27:51Z")

</div>

Hi Leandro,  
Thank you for your response. That was my next thing to try, to remove the data role.  
I wasn't aware of the note about specialized data nodes.  
I'll let you know once I remove the data role  
Thank you!

---

<div class="post-metadata">

### Author: ![Anabella\_Cristaldi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anabella_cristaldi/32/23612_2.png) [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)
#### Post date: [August 25, 2021, 3:37pm UTC](https://discuss.elastic.co/t/data-tier-problem-new-indices-not-allocating-in-data-hot/282498/4 "2021-08-25T15:37:30Z")

</div>

Yes. The problem was caused by having the general and specialized data role in the node.  
The generic data role have precedence over the specialized data node and that was causing this behaviour.  
Thank you very much  
Regads  
Ana

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 22, 2021, 3:37pm UTC](https://discuss.elastic.co/t/data-tier-problem-new-indices-not-allocating-in-data-hot/282498/5 "2021-09-22T15:37:46Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
