Separate of read and write indices

is there any way to setup separate readonly schema and write schema.

Not really, you can't write to one index and then have the write magically appear in another index without a similar write.

What are you trying to do?

Snapshot restore?

Snapshot from the write store and restore into the read-only one.
These operations should be incremental so that only segments with new writes are copied over (plus also any segments rewritten as part of merge operations).
Obviously this would be high latency of updates as you'd only do this operation ever so often to allow the read-only store to "catch up" with the write-enabled store.

I have no direct experience of employing this technique so will leave it to others to comment on its effectiveness.

i would trying to separate operation to get better performance, log stash will be pointing to write index and the same time kibana will be pointing into read only index.

Sure, but you still need to write to the "read only" index, so it's doing the same amount of work as the "write only" index anyway. Adding reads isn't going to make any magic difference.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.