Edit default logstash index template

Elastic Stack Logstash
1

Hey folks, been going back and forth on documentation and discuss topics. Unfortunately, I couldn't found a solution to my problem.

I have a default index template for logstash, if I do GET /_template/elasticsearch-template-es5x.json

I can see that by default it will create an index with 20 shards.
My idea was to reduce this to 1.

So I did:

PUT /_template/elasticsearch-template-es5x.json?pretty
{
    "index_patterns" : ["logstash-*"],
    "settings": {
      "number_of_shards": 1
    }
}

Which gives a beautiful response of:

{
  "acknowledged" : true
}

But if get our template again GET /_template/elasticsearch-template-es5x.json, it still says 20 shards.

Now the question is how can I edit this? Do I need to create a new template with the same specs? Will that overwrite this default template? Do I need to somehow edit the file somewhere, because elastic is loading the file from the disk?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.