I was wondering if I'm missing something here.
when an index is created on elasticsearch dynamically (from logstash, fluent, etc.), where does it get it's setting from (like shard amount, etc.)?
I was under the impression that it comes from the index templates, but I'm looking now at a brand new cluster, and I don't see any templates there, but still indices are being created.
There are default values for index settings (5 primary shards and 1 replica shard) that are applied to new indices if nothing else is specified. Elasticsearch then uses dynamic mapping to determine the type of a field based on the first occurrence it comes across.
great. so if there is no specific template it uses the default values.
and if I need to override them, I have to create an appropriate index template. correct?
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.