# ES and SAN storage

**URL:** <https://discuss.elastic.co/t/es-and-san-storage/17285>\
**Category:** Elasticsearch\
**Created:** [April 30, 2014, 3:47pm UTC](https://discuss.elastic.co/t/es-and-san-storage/17285 "2014-04-30T15:47:51Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Patrick\_Proniewski](https://avatars.discourse-cdn.com/v4/letter/p/96bed5/32.png) [@Patrick\_Proniewski](https://discuss.elastic.co/u/Patrick_Proniewski)\
**Post date:** [April 30, 2014, 3:47pm UTC](https://discuss.elastic.co/t/es-and-san-storage/17285/1 "2014-04-30T15:47:51Z")

</div>

Hello,

I'm still testing ES at a very small scale (1 node on a multipurpose server), but I would like to extend it's use at work as a backend for logstash. It means that the LS+ES cluster would have to eat few GB of data every day, up to 15 or 20GB later if things go well.  
I'm doing all this as a side project: no investment apart from work hours. I will recycle blades and storage we plan to decommission from our virtualization farm.  
So I'm likely to end with 2 or 3 dual-xeon blades, but no real internal storage (an SD-card), and a LUN on a SAN.

How does ES behave is shared storage condition? What are the best practices about nodes/shards/replicas/...?  
Intended audience is Operation team, so less than 10 persons. So no big search concurrency but probably mostly "deep" search and ill-designed queries 🙂

thanks,  
Patrick

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/0EF076AD-2908-4860-A97F-060A5C511AC3%40patpro.net](https://groups.google.com/d/msgid/elasticsearch/0EF076AD-2908-4860-A97F-060A5C511AC3%40patpro.net).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![Mohit\_Anchlia](https://avatars.discourse-cdn.com/v4/letter/m/848f3c/32.png) [@Mohit\_Anchlia](https://discuss.elastic.co/u/Mohit_Anchlia)\
**Post date:** [April 30, 2014, 4:33pm UTC](https://discuss.elastic.co/t/es-and-san-storage/17285/2 "2014-04-30T16:33:54Z")

</div>

I think anyone will find it difficult to answer such questions just because  
there are several factors that derive the decision like latency  
requirements, high availability requirements, how shared SAN storage is and  
impact of somebody stealing IO under the hood etc. The best way is to  
develop a test model and test it out. Look at cluster settings on how to  
disable/enable shard allocation.

On Wed, Apr 30, 2014 at 8:47 AM, Patrick Proniewski \<  
[elasticsearch@patpro.net](mailto:elasticsearch@patpro.net)\> wrote:

> Hello,
> 
> I'm still testing ES at a very small scale (1 node on a multipurpose  
> server), but I would like to extend it's use at work as a backend for  
> logstash. It means that the LS+ES cluster would have to eat few GB of data  
> every day, up to 15 or 20GB later if things go well.  
> I'm doing all this as a side project: no investment apart from work hours.  
> I will recycle blades and storage we plan to decommission from our  
> virtualization farm.  
> So I'm likely to end with 2 or 3 dual-xeon blades, but no real internal  
> storage (an SD-card), and a LUN on a SAN.
> 
> How does ES behave is shared storage condition? What are the best  
> practices about nodes/shards/replicas/...?  
> Intended audience is Operation team, so less than 10 persons. So no big  
> search concurrency but probably mostly "deep" search and ill-designed  
> queries 🙂
> 
> thanks,  
> Patrick
> 
> --  
> You received this message because you are subscribed to the Google Groups  
> "elasticsearch" group.  
> To unsubscribe from this group and stop receiving emails from it, send an  
> email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> To view this discussion on the web visit  
> [https://groups.google.com/d/msgid/elasticsearch/0EF076AD-2908-4860-A97F-060A5C511AC3%40patpro.net](https://groups.google.com/d/msgid/elasticsearch/0EF076AD-2908-4860-A97F-060A5C511AC3%40patpro.net)  
> .  
> For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAOT3TWrdPOcspORJT\_AR%3DXUNQ5H0xfVcEpL%2B6aZ-sPb9X\_Lsgw%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAOT3TWrdPOcspORJT_AR%3DXUNQ5H0xfVcEpL%2B6aZ-sPb9X_Lsgw%40mail.gmail.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![Patrick\_Proniewski](https://avatars.discourse-cdn.com/v4/letter/p/96bed5/32.png) [@Patrick\_Proniewski](https://discuss.elastic.co/u/Patrick_Proniewski)\
**Post date:** [April 30, 2014, 5:04pm UTC](https://discuss.elastic.co/t/es-and-san-storage/17285/3 "2014-04-30T17:04:11Z")

</div>

Well, then maybe my questions were not precise enough.  
My first goal was to make sure ES does work sharing a unique storage for all nodes.  
My second gaol was to learn if each node requires to have its dedicated file tree, or if you can put every files together as if there's only one ES node.  
Does-it make sense to have replicas when eventually filesystem IOs are shared?  
Does moving a shard from a node to another makes data passing through the CPU, or is ES smart enough to just pass the pointer to the file?

On 30 avr. 2014, at 18:33, Mohit Anchlia wrote:

> I think anyone will find it difficult to answer such questions just because there are several factors that derive the decision like latency requirements, high availability requirements, how shared SAN storage is and impact of somebody stealing IO under the hood etc. The best way is to develop a test model and test it out. Look at cluster settings on how to disable/enable shard allocation.
> 
> On Wed, Apr 30, 2014 at 8:47 AM, Patrick Proniewski [elasticsearch@patpro.net](mailto:elasticsearch@patpro.net) wrote:  
> Hello,
> 
> I'm still testing ES at a very small scale (1 node on a multipurpose server), but I would like to extend it's use at work as a backend for logstash. It means that the LS+ES cluster would have to eat few GB of data every day, up to 15 or 20GB later if things go well.  
> I'm doing all this as a side project: no investment apart from work hours. I will recycle blades and storage we plan to decommission from our virtualization farm.  
> So I'm likely to end with 2 or 3 dual-xeon blades, but no real internal storage (an SD-card), and a LUN on a SAN.
> 
> How does ES behave is shared storage condition? What are the best practices about nodes/shards/replicas/...?  
> Intended audience is Operation team, so less than 10 persons. So no big search concurrency but probably mostly "deep" search and ill-designed queries 🙂
> 
> thanks,  
> Patrick

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/F6DDE665-B311-4964-A0BF-FFEF156E4FA3%40patpro.net](https://groups.google.com/d/msgid/elasticsearch/F6DDE665-B311-4964-A0BF-FFEF156E4FA3%40patpro.net).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![Mohit\_Anchlia](https://avatars.discourse-cdn.com/v4/letter/m/848f3c/32.png) [@Mohit\_Anchlia](https://discuss.elastic.co/u/Mohit_Anchlia)\
**Post date:** [April 30, 2014, 5:34pm UTC](https://discuss.elastic.co/t/es-and-san-storage/17285/4 "2014-04-30T17:34:57Z")

</div>

I'll try and answer as much I know:

ES shouldn't have any issues working with SAN, NFS or EBS. Yes each node  
need its own unique file path, they don't share files from other nodes.  
Replicas in this only make sense if you are solving for a VM or a node  
failure per se. Or it also makes sense if you have SAN storage coming from  
a different array.

I don't follow your last question.

On Wed, Apr 30, 2014 at 10:04 AM, Patrick Proniewski \<  
[elasticsearch@patpro.net](mailto:elasticsearch@patpro.net)\> wrote:

> Well, then maybe my questions were not precise enough.  
> My first goal was to make sure ES does work sharing a unique storage for  
> all nodes.  
> My second gaol was to learn if each node requires to have its dedicated  
> file tree, or if you can put every files together as if there's only one ES  
> node.  
> Does-it make sense to have replicas when eventually filesystem IOs are  
> shared?  
> Does moving a shard from a node to another makes data passing through the  
> CPU, or is ES smart enough to just pass the pointer to the file?
> 
> On 30 avr. 2014, at 18:33, Mohit Anchlia wrote:
> 
> > I think anyone will find it difficult to answer such questions just  
> > because there are several factors that derive the decision like latency  
> > requirements, high availability requirements, how shared SAN storage is and  
> > impact of somebody stealing IO under the hood etc. The best way is to  
> > develop a test model and test it out. Look at cluster settings on how to  
> > disable/enable shard allocation.
> > 
> > On Wed, Apr 30, 2014 at 8:47 AM, Patrick Proniewski \<  
> > [elasticsearch@patpro.net](mailto:elasticsearch@patpro.net)\> wrote:  
> > Hello,
> > 
> > I'm still testing ES at a very small scale (1 node on a multipurpose  
> > server), but I would like to extend it's use at work as a backend for  
> > logstash. It means that the LS+ES cluster would have to eat few GB of data  
> > every day, up to 15 or 20GB later if things go well.  
> > I'm doing all this as a side project: no investment apart from work  
> > hours. I will recycle blades and storage we plan to decommission from our  
> > virtualization farm.  
> > So I'm likely to end with 2 or 3 dual-xeon blades, but no real internal  
> > storage (an SD-card), and a LUN on a SAN.
> > 
> > How does ES behave is shared storage condition? What are the best  
> > practices about nodes/shards/replicas/...?  
> > Intended audience is Operation team, so less than 10 persons. So no big  
> > search concurrency but probably mostly "deep" search and ill-designed  
> > queries 🙂
> > 
> > thanks,  
> > Patrick
> 
> --  
> You received this message because you are subscribed to the Google Groups  
> "elasticsearch" group.  
> To unsubscribe from this group and stop receiving emails from it, send an  
> email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> To view this discussion on the web visit  
> [https://groups.google.com/d/msgid/elasticsearch/F6DDE665-B311-4964-A0BF-FFEF156E4FA3%40patpro.net](https://groups.google.com/d/msgid/elasticsearch/F6DDE665-B311-4964-A0BF-FFEF156E4FA3%40patpro.net)  
> .  
> For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAOT3TWrqqNrh7jbW3%2BvO%2BSpXdxRGTvB3zcCod6yPRMgt42kcUA%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAOT3TWrqqNrh7jbW3%2BvO%2BSpXdxRGTvB3zcCod6yPRMgt42kcUA%40mail.gmail.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![Patrick\_Proniewski](https://avatars.discourse-cdn.com/v4/letter/p/96bed5/32.png) [@Patrick\_Proniewski](https://discuss.elastic.co/u/Patrick_Proniewski)\
**Post date:** [April 30, 2014, 8:05pm UTC](https://discuss.elastic.co/t/es-and-san-storage/17285/5 "2014-04-30T20:05:58Z")

</div>

On 30 avr. 2014, at 19:34, Mohit Anchlia wrote:

> I'll try and answer as much I know:
> 
> ES shouldn't have any issues working with SAN, NFS or EBS. Yes each node need its own unique file path, they don't share files from other nodes.

ok.

> Replicas in this only make sense if you are solving for a VM or a node failure per se. Or it also makes sense if you have SAN storage coming from a different array.

ok.

> I don't follow your last question.

My english is limited, sorry. As far as I understand ES, some shard balancing occurs in the background, when some are created or deleted, others will move from node to node so the number of shards is even between nodes. When storage is isolated for each node, moving a shard to another node requires the file to go through the node CPU/RAM, then network, then CPU/RAM of remote node, then storage. It would be very nice in a shared-storage scenario that the shard would not be moved through fs-cpu-ram-network-cpu-ram-fs but through a simple rename-and-tell action.  
Does it make sense?

> On Wed, Apr 30, 2014 at 10:04 AM, Patrick Proniewski [elasticsearch@patpro.net](mailto:elasticsearch@patpro.net) wrote:  
> Well, then maybe my questions were not precise enough.  
> My first goal was to make sure ES does work sharing a unique storage for all nodes.  
> My second gaol was to learn if each node requires to have its dedicated file tree, or if you can put every files together as if there's only one ES node.  
> Does-it make sense to have replicas when eventually filesystem IOs are shared?  
> Does moving a shard from a node to another makes data passing through the CPU, or is ES smart enough to just pass the pointer to the file?

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/2D4B8E1F-3513-465F-B864-65401D9E38E1%40patpro.net](https://groups.google.com/d/msgid/elasticsearch/2D4B8E1F-3513-465F-B864-65401D9E38E1%40patpro.net).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![Mohit\_Anchlia](https://avatars.discourse-cdn.com/v4/letter/m/848f3c/32.png) [@Mohit\_Anchlia](https://discuss.elastic.co/u/Mohit_Anchlia)\
**Post date:** [April 30, 2014, 8:43pm UTC](https://discuss.elastic.co/t/es-and-san-storage/17285/6 "2014-04-30T20:43:25Z")

</div>

It makes sense if it was just as simple 🙂 The reason shards need to move  
through the higher level of stack is that every node maintains it's own  
indexes or lucene segments and it can't just be switched. And I think that  
is primarily because of how internal structures are maintained in lucene.  
You might be able to develop a workaround using one or more of these  
settings:

> **[Elasticsearch Platform — Find real-time answers at scale](https://www.elastic.co)**
>
> Power insights and outcomes with the Elasticsearch Platform and AI. See into your data and find answers that matter with enterprise solutions designed to help you build, observe, and protect. Try Elasticsearch free today.

On Wed, Apr 30, 2014 at 1:05 PM, Patrick Proniewski \<  
[elasticsearch@patpro.net](mailto:elasticsearch@patpro.net)\> wrote:

> On 30 avr. 2014, at 19:34, Mohit Anchlia wrote:
> 
> > I'll try and answer as much I know:
> > 
> > ES shouldn't have any issues working with SAN, NFS or EBS. Yes each node  
> > need its own unique file path, they don't share files from other nodes.
> 
> ok.
> 
> > Replicas in this only make sense if you are solving for a VM or a node  
> > failure per se. Or it also makes sense if you have SAN storage coming from  
> > a different array.
> 
> ok.
> 
> > I don't follow your last question.
> 
> My english is limited, sorry. As far as I understand ES, some shard  
> balancing occurs in the background, when some are created or deleted,  
> others will move from node to node so the number of shards is even between  
> nodes. When storage is isolated for each node, moving a shard to another  
> node requires the file to go through the node CPU/RAM, then network, then  
> CPU/RAM of remote node, then storage. It would be very nice in a  
> shared-storage scenario that the shard would not be moved through  
> fs-cpu-ram-network-cpu-ram-fs but through a simple rename-and-tell action.  
> Does it make sense?
> 
> > On Wed, Apr 30, 2014 at 10:04 AM, Patrick Proniewski \<  
> > [elasticsearch@patpro.net](mailto:elasticsearch@patpro.net)\> wrote:  
> > Well, then maybe my questions were not precise enough.  
> > My first goal was to make sure ES does work sharing a unique storage for  
> > all nodes.  
> > My second gaol was to learn if each node requires to have its dedicated  
> > file tree, or if you can put every files together as if there's only one ES  
> > node.  
> > Does-it make sense to have replicas when eventually filesystem IOs are  
> > shared?  
> > Does moving a shard from a node to another makes data passing through  
> > the CPU, or is ES smart enough to just pass the pointer to the file?
> 
> --  
> You received this message because you are subscribed to the Google Groups  
> "elasticsearch" group.  
> To unsubscribe from this group and stop receiving emails from it, send an  
> email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> To view this discussion on the web visit  
> [https://groups.google.com/d/msgid/elasticsearch/2D4B8E1F-3513-465F-B864-65401D9E38E1%40patpro.net](https://groups.google.com/d/msgid/elasticsearch/2D4B8E1F-3513-465F-B864-65401D9E38E1%40patpro.net)  
> .  
> For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAOT3TWqDyjcfPKxvY37b%2B%2BTwnDk7xj9A%2BL0k19wiLG58XNGPZA%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAOT3TWqDyjcfPKxvY37b%2B%2BTwnDk7xj9A%2BL0k19wiLG58XNGPZA%40mail.gmail.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:32am UTC](https://discuss.elastic.co/t/es-and-san-storage/17285/7 "2017-07-06T01:32:23Z")

</div>


