# Regular IO peak in Elasticsearch data disk

**URL:** <https://discuss.elastic.co/t/regular-io-peak-in-elasticsearch-data-disk/259771>\
**Category:** Elasticsearch\
**Created:** [December 29, 2020, 5:14am UTC](https://discuss.elastic.co/t/regular-io-peak-in-elasticsearch-data-disk/259771 "2020-12-29T05:14:19Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![zhiweiv](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zhiweiv/32/70217_2.png) [@zhiweiv](https://discuss.elastic.co/u/zhiweiv)\
**Post date:** [December 29, 2020, 5:14am UTC](https://discuss.elastic.co/t/regular-io-peak-in-elasticsearch-data-disk/259771/1 "2020-12-29T05:14:19Z")

</div>

We observed regular IO peak in Elasticsearch data disk, it is triggered every 10 minutes. How can I find which function triggered this? There is nothing in ES log.

 ![es](https://us1.discourse-cdn.com/elastic/original/3X/b/3/b321d875505a21889c9473ecaa7ed42480bf8295.png)

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 29, 2020, 6:12am UTC](https://discuss.elastic.co/t/regular-io-peak-in-elasticsearch-data-disk/259771/2 "2020-12-29T06:12:58Z")

</div>

What is this a graph of exactly?

---

<div class="post-metadata">

**Author:** ![zhiweiv](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zhiweiv/32/70217_2.png) [@zhiweiv](https://discuss.elastic.co/u/zhiweiv)\
**Post date:** [December 29, 2020, 6:19am UTC](https://discuss.elastic.co/t/regular-io-peak-in-elasticsearch-data-disk/259771/3 "2020-12-29T06:19:13Z")

</div>

It is transaction number per minute of Azure File, metrics from Azure Portal, we use Azure File as data disk, the ELK stack run in AKS via Elastic Cloud on K8s.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 29, 2020, 6:20am UTC](https://discuss.elastic.co/t/regular-io-peak-in-elasticsearch-data-disk/259771/4 "2020-12-29T06:20:26Z")

</div>

You mean [https://docs.microsoft.com/en-us/azure/storage/files/storage-files-introduction](https://docs.microsoft.com/en-us/azure/storage/files/storage-files-introduction)? If so it's not really recommended to run Elasticsearch on these sorts of filesystems.

---

<div class="post-metadata">

**Author:** ![zhiweiv](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zhiweiv/32/70217_2.png) [@zhiweiv](https://discuss.elastic.co/u/zhiweiv)\
**Post date:** [December 30, 2020, 1:43am UTC](https://discuss.elastic.co/t/regular-io-peak-in-elasticsearch-data-disk/259771/5 "2020-12-30T01:43:40Z")

</div>

We use hot/cold architecture, cold node use Azure File as data disk. The price model of Azure File is that IO is charged more than regular disk, but storage price is cheaper. By default data are written to hot node, data will be rollover to cold node by ILM.

The problem is that there are a lot of IO even when no rollover happen. There is regular IO peak on cold node, we want to avoid this to reduce meaningless cost. So we want to know how to troubleshoot to find the root cause. I didn't find any possible schedule task mentioned in document.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 30, 2020, 2:07am UTC](https://discuss.elastic.co/t/regular-io-peak-in-elasticsearch-data-disk/259771/6 "2020-12-30T02:07:23Z")

</div>

You might want to enable Monitoring on your cluster to see what is happening, it could be merges for eg.

---

<div class="post-metadata">

**Author:** ![zhiweiv](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zhiweiv/32/70217_2.png) [@zhiweiv](https://discuss.elastic.co/u/zhiweiv)\
**Post date:** [December 30, 2020, 2:18am UTC](https://discuss.elastic.co/t/regular-io-peak-in-elasticsearch-data-disk/259771/7 "2020-12-30T02:18:37Z")

</div>

Thanks warkolm, do you have any link about Monitoring you mentioned. We are using Basic License, some advanced features may not available for us.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 30, 2020, 2:47am UTC](https://discuss.elastic.co/t/regular-io-peak-in-elasticsearch-data-disk/259771/8 "2020-12-30T02:47:44Z")

</div>

Check out [https://www.elastic.co/kibana/features#full-stack-monitoring](https://www.elastic.co/kibana/features#full-stack-monitoring), it's part of Basic.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 27, 2021, 2:47am UTC](https://discuss.elastic.co/t/regular-io-peak-in-elasticsearch-data-disk/259771/9 "2021-01-27T02:47:47Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
