Im a bit confused about the ES restore process.
I have a prod cluster and stage cluster.
Prod cluster has daily snapshots enabled.
The first time when I restored the snapshot from the prod backup it took a lot more time to restore(due to the size 2TB)
Then the next day prod completed the snapshot(its incremental in nature), so not much changes. Snapshot done in a few mins.
Then on the stage server, I closed the indices and restored the snapshot, this is also quick.
This is what I want to understand. We have done so many changes on the stage server, so I think it has to restore the full data. How it'll identify yesterday's full backup state and only replace them?