Howdy! Since you're using Elastic Cloud, you may consider filing a case to Elastic Support instead of generic Elastic Discuss community members, so that the team can investigate your direct deployment & offer direct/data-sensitive advice privately
Change induced setup: I recommend against Prod testing & also against shifting everything to cold nodes and then by query frequency moving indices back. Usually when adding data tiers, (spitballing game plan) users will
investigate index query frequency (e.g. via Index stats)
add ILM policies to indices/templates (e.g. blog & blog)
Expand the rollover/min_age values on ILM policies associated to index/template per high search volume/frequency & start pushing less accessed data into warm and then cold nodes
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.