We plan to restart a data note that was stopped for a long time ( > 20 days).
Cluster version is 6.4.1 and it is in green state.
Can we simply restart elasticsearch on the node or should we perform some operations before?
You can simply restart the node. However, there is a risk that this node will contain shards from indices that were deleted and have fallen out of the index graveyard of 500 indices (by default). If so then when the node is restarted those indices will be treated as dangling indices, and imported, which probably isn't what you wanted to happen. You'd have to watch the logs and delete any indices that are so imported.
If your cluster is green and you're not interested in recovering any data that was on the stopped node then I would start afresh: simply empty its data directory before starting it again.
1 Like
Thank you David.
I wasn't sure if the old indices would have been imported with potentially a lof of missing shards on the indices that were deleted during the time the node was stopped.
With that knowledge I will start the node afresh with empty data.
1 Like
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.