I have a single standalone server running the ELK stack. When I rebooted the server yesterday elasticsearch was slow to start and I found a message in the logs saying:
auto importing dangled indices
A quick google confirmed that this is a message that should only occur in a cluster, but I have a single server. I seem though to have 2 nodes (one on port 9300 and one on 9301).
{
"cluster_name" : "elasticsearch",
"status" : "yellow",
"timed_out" : false,
"number_of_nodes" : 2,
"number_of_data_nodes" : 2,
"active_primary_shards" : 911,
"active_shards" : 985,
"relocating_shards" : 0,
"initializing_shards" : 2,
"unassigned_shards" : 835,
"delayed_unassigned_shards" : 0,
"number_of_pending_tasks" : 0,
"number_of_in_flight_fetch" : 0,
"task_max_waiting_in_queue_millis" : 0,
"active_shards_percent_as_number" : 54.061470911086715
}
I'm curious about:
- Is this expected behaviour (to have 2 nodes on 1 server) ?
- I have another standalone ELK server with just one node in it's cluster, if I reboot this server is another node likely to appear and the dangling index import process take place ?
many thanks!