Is there a way to toggle indexing of data on and off?

odd question, but is there a way to toggle the ability of elasticsearch to accept data indexing requests?

ie say in a scenario where you are trying to create a new cluster with a specific mappings/settings, and dont want any data to get indexed until you have created those mappings/settings. or where you might need to diagnose an issue and dont want data to change while you are examining it (but have no ability to stop the data flow)

Not directly.

You could use Shield or a firewall to restrict access up to a point in time I guess.