# How can I configure Elasticsearch to use our SAN drive?

**URL:** <https://discuss.elastic.co/t/how-can-i-configure-elasticsearch-to-use-our-san-drive/27889>\
**Category:** Elasticsearch\
**Created:** [August 23, 2015, 7:57am UTC](https://discuss.elastic.co/t/how-can-i-configure-elasticsearch-to-use-our-san-drive/27889 "2015-08-23T07:57:31Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![thyfere](https://avatars.discourse-cdn.com/v4/letter/t/48db29/32.png) [@thyfere](https://discuss.elastic.co/u/thyfere)\
**Post date:** [August 23, 2015, 7:57am UTC](https://discuss.elastic.co/t/how-can-i-configure-elasticsearch-to-use-our-san-drive/27889/1 "2015-08-23T07:57:31Z")

</div>

HI,

I have a ELK stack setup on 2 servers, i.e. Logstash on one server, and Elastic and Kibana on other.

First, I need to know where Elastic search stores are incoming logs and how can I change that path. I want to use my SAN drive for storing logs.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [August 23, 2015, 8:39am UTC](https://discuss.elastic.co/t/how-can-i-configure-elasticsearch-to-use-our-san-drive/27889/2 "2015-08-23T08:39:25Z")

</div>

See [https://www.elastic.co/guide/en/elasticsearch/reference/current/setup-dir-layout.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/setup-dir-layout.html)

---

<div class="post-metadata">

**Author:** ![thyfere](https://avatars.discourse-cdn.com/v4/letter/t/48db29/32.png) [@thyfere](https://discuss.elastic.co/u/thyfere)\
**Post date:** [August 27, 2015, 7:58am UTC](https://discuss.elastic.co/t/how-can-i-configure-elasticsearch-to-use-our-san-drive/27889/3 "2015-08-27T07:58:20Z")

</div>

Thanks Mark for the reply. But my question is same. Still I couldn't figure out that how can I configure my SAN storage to store the incoming logs from my Windows machines? I am a newbie to ELK stack; therefore, maybe I am asking a stupid question but please bear with me.

Second, once someone let me know, how and where can I configure the path, in which format it will take the path, volume or UNC path?

Thanks for understanding.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [August 27, 2015, 8:31am UTC](https://discuss.elastic.co/t/how-can-i-configure-elasticsearch-to-use-our-san-drive/27889/4 "2015-08-27T08:31:47Z")

</div>

It's not clear what you are asking then.

Do you want to store the indexed logs in ES and then store the ES data on the SAN? Do you want to store the ES logs on the SAN? If not, what exactly.

---

<div class="post-metadata">

**Author:** ![thyfere](https://avatars.discourse-cdn.com/v4/letter/t/48db29/32.png) [@thyfere](https://discuss.elastic.co/u/thyfere)\
**Post date:** [August 27, 2015, 8:42am UTC](https://discuss.elastic.co/t/how-can-i-configure-elasticsearch-to-use-our-san-drive/27889/5 "2015-08-27T08:42:27Z")

</div>

We have have setup ELK stack on two machines. One is for Logstash and other is for Elasticsearch and Kibana. Now as logstash will forward all logs to Elasticsearch, right? If yes, that machine's HDD will be full very quickly; therefore, we want to use our SAN storage. I want to store that incoming logs to that SAN storage. If it is called indexed logs, yes, I want to store those indexed logs to external SAN storage.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [August 27, 2015, 9:05am UTC](https://discuss.elastic.co/t/how-can-i-configure-elasticsearch-to-use-our-san-drive/27889/6 "2015-08-27T09:05:48Z")

</div>

Ok.

Then, per that link I posted, you set `path.data` to whatever the mount is, that's done in `elasticsearch.yml`.

---

<div class="post-metadata">

**Author:** ![thyfere](https://avatars.discourse-cdn.com/v4/letter/t/48db29/32.png) [@thyfere](https://discuss.elastic.co/u/thyfere)\
**Post date:** [August 27, 2015, 9:19am UTC](https://discuss.elastic.co/t/how-can-i-configure-elasticsearch-to-use-our-san-drive/27889/7 "2015-08-27T09:19:29Z")

</div>

I am not a linux/unix guy and that yml file freaks me out 😁

Could you please let me know, if my I want to store the indexed data on \servername\abc. How can I write it in yml file?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [August 27, 2015, 9:20am UTC](https://discuss.elastic.co/t/how-can-i-configure-elasticsearch-to-use-our-san-drive/27889/8 "2015-08-27T09:20:48Z")

</div>

`path.data: \servername\abc`

---

<div class="post-metadata">

**Author:** ![thyfere](https://avatars.discourse-cdn.com/v4/letter/t/48db29/32.png) [@thyfere](https://discuss.elastic.co/u/thyfere)\
**Post date:** [August 27, 2015, 11:44am UTC](https://discuss.elastic.co/t/how-can-i-configure-elasticsearch-to-use-our-san-drive/27889/9 "2015-08-27T11:44:21Z")

</div>

Thanks...

Btw, forward / or back slash \ ?

---

<div class="post-metadata">

**Author:** ![thyfere](https://avatars.discourse-cdn.com/v4/letter/t/48db29/32.png) [@thyfere](https://discuss.elastic.co/u/thyfere)\
**Post date:** [August 27, 2015, 3:45pm UTC](https://discuss.elastic.co/t/how-can-i-configure-elasticsearch-to-use-our-san-drive/27889/10 "2015-08-27T15:45:00Z")

</div>

So, I figured out the right syntax which is as follow:

path.data: \\servername\folder

It's working like a charm...

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 11:53pm UTC](https://discuss.elastic.co/t/how-can-i-configure-elasticsearch-to-use-our-san-drive/27889/11 "2017-07-05T23:53:27Z")

</div>


