# Is the indices dir corresponded to indices I have in cluster?

**URL:** <https://discuss.elastic.co/t/is-the-indices-dir-corresponded-to-indices-i-have-in-cluster/262924>\
**Category:** Elasticsearch\
**Created:** [February 2, 2021, 3:26am UTC](https://discuss.elastic.co/t/is-the-indices-dir-corresponded-to-indices-i-have-in-cluster/262924 "2021-02-02T03:26:16Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![CHU\_XU](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chu_xu/32/45946_2.png) [@CHU\_XU](https://discuss.elastic.co/u/CHU_XU)\
**Post date:** [February 2, 2021, 3:26am UTC](https://discuss.elastic.co/t/is-the-indices-dir-corresponded-to-indices-i-have-in-cluster/262924/1 "2021-02-02T03:26:17Z")

</div>

Hi experts,

When I'm exploring the data dir of elasticsearch node, I found that there are some dirs in 'data/nodes/0/indices', say 'foo' and 'bar'. Are these dirs right my actual indices in cluster(foo and bar) correspondingly?

Actually I'm thinking to encrypt data on disk with index level. For example, encrypt index foo with key\_foo and encrypt index bar with key\_bar. If answer to the dir question is yes, then I can just encrypt the index data file with specific key.

Or any other ways to do index level at rest encryption?

Thanls

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [February 2, 2021, 3:36am UTC](https://discuss.elastic.co/t/is-the-indices-dir-corresponded-to-indices-i-have-in-cluster/262924/2 "2021-02-02T03:36:59Z")

</div>

Encryption at rest is usually done on the whole volume.  
There are/were 3rd party (commercial) solutions that sat on top of Elasticsearch to do this, but I don't know the status of them as I saw them a few years ago now.

> [@CHU\_XU](#):
>
> When I'm exploring the data dir of elasticsearch node, I found that there are some dirs in 'data/nodes/0/indices', say 'foo' and 'bar'. Are these dirs right my actual indices in cluster(foo and bar) correspondingly?

I would hazard a guess and say that you cannot directly map index names to directory names that easily, so it's not likely you can do it like that.

Hopefully someone like David Turner will pop in and add some more comments, as he knows this area well.

---

<div class="post-metadata">

**Author:** ![CHU\_XU](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chu_xu/32/45946_2.png) [@CHU\_XU](https://discuss.elastic.co/u/CHU_XU)\
**Post date:** [February 2, 2021, 5:54am UTC](https://discuss.elastic.co/t/is-the-indices-dir-corresponded-to-indices-i-have-in-cluster/262924/3 "2021-02-02T05:54:20Z")

</div>

Thanks, I checked the source code and did some debug, seems that the dir name is actually uuid of index.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [February 2, 2021, 8:36am UTC](https://discuss.elastic.co/t/is-the-indices-dir-corresponded-to-indices-i-have-in-cluster/262924/4 "2021-02-02T08:36:26Z")

</div>

Yep that sounds right.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 2, 2021, 8:36am UTC](https://discuss.elastic.co/t/is-the-indices-dir-corresponded-to-indices-i-have-in-cluster/262924/5 "2021-03-02T08:36:55Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
