# Shard in es cluster

**URL:** <https://discuss.elastic.co/t/shard-in-es-cluster/256512>\
**Category:** Elasticsearch\
**Created:** [November 24, 2020, 1:08pm UTC](https://discuss.elastic.co/t/shard-in-es-cluster/256512 "2020-11-24T13:08:39Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![RAM\_NATHAN](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ram_nathan/32/50393_2.png) [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Post date:** [November 24, 2020, 1:08pm UTC](https://discuss.elastic.co/t/shard-in-es-cluster/256512/1 "2020-11-24T13:08:39Z")

</div>

I had a single node default "Elasticsearch" cluster so far. It had one index and two alias associated with that  
`curl -s -X PUT $elasticsearchURL/$indexName?pretty -H 'Content-Type: application/json' -d '{"settings":{"index":{"number_of_shards" : 1,"number_of_replicas" : 1}}}' `

As you see I have shards as 1. So far I had only single node. So I didnt bother about shards.  
Now I have created three nodes cluster with two new nodes together with previous node. I guess same index will get replicated in other two nodes with single shard once it joined cluster

1. should I increase shards when I move to cluster?
2. What is the impact if I leave above as it is?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 25, 2020, 12:51am UTC](https://discuss.elastic.co/t/shard-in-es-cluster/256512/2 "2020-11-25T00:51:31Z")

</div>

This is a; It Depends.

You can add more replicas, which is useful for both querying and redundancy. You can also look to use the `_split` endpoint to create more primary shards for the existing index, this is useful for indexing throughput.

Ultimately it comes to what sort of data you have, and what you do with it.

---

<div class="post-metadata">

**Author:** ![RAM\_NATHAN](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ram_nathan/32/50393_2.png) [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Post date:** [November 25, 2020, 5:48am UTC](https://discuss.elastic.co/t/shard-in-es-cluster/256512/3 "2020-11-25T05:48:15Z")

</div>

We use to parse over CSV data using logstash and store it in index using alias

elasticsearch  
{  
hosts =\> ["localhost:9200"]  
index =\> "dashboard\_write"  
ilm\_enabled =\> false  
}

dashboard\_write is the alias for our index dashboard-\*. We use to create rollover index everyday

Will I face any performance impact in my cluster due to single shard?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 23, 2020, 5:48am UTC](https://discuss.elastic.co/t/shard-in-es-cluster/256512/4 "2020-12-23T05:48:22Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.