Hello there! I am new to elasticsearch. So i was looking around ILM and it was a quite useful tool to remove old indices. But my concern here is, when i looked into /var/lib/elasticsearch. There was a folder named indices and i couldnt understand the name that were mention in it. So my question is what is the difference between these to screenshots, are they same or are they related to each other ?.
That top picture is of the elasticsearch data directory, that is where the actual elasticsearch data is stored in binary / lucene format.
Indices data are stored in 1 or more segment files and those files can change over the life cycle of the index behind the scenes, various elasticsearch processes.
There is no direct intentional user oriented mapping between the indices and those directories.
Do not touch anything in those directories or you will corrupt the elasticsearch data and it will most likely be unrecoverable.
That directory is not meant to be accessed, viewed or changed by user.
All access to Elasticsearch data should be through the appropriate tools (Kibana, beats etc) or rest APIs.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.