Currently all our indices are created daily with number of shards is 5(default). I would like to change number of shards to 1 for newly created indices. Can an index co exist with different number of shards.
example: logstash-*
logstash-2018-03-* with 5 shards
logstash-2018-04-* with 1 shard.
With the above configuration would I still be able search old and new data.
The beauty of using time-based indices is that you can change the underlying shard count over time through index templates, so the fact that indices being queried have different number of shards is not a problem at all.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.