Hey,
I have 3 elasticsearch nodes (2 hot and 1 cold_data at the moment). I receive logs from logstash and store them in hot nodes. I would like move "old" logs with ILM to cold_data nodes, but when I start cold_data node, then all hot nodes are rebalancing and put some replica shards to cold_data node.
I tried cluster.routing.allocation.exclude._ip: "cold_data_node_ip"
in cold data node config, but ILM cannot move the primary shards too to node.
How can I disable that, cluster do not move replica shard to cold data node?