Stop shard balancing

[SleekPainter01 (Marcus Paulo)]

Good morning everything is fine?

I have 3 clients receiving logs via filebeat.

And I have 1 Elasticsearch node for each client.

However, load balancing of fragments between nodes is taking place.

How could this balancing of fragments between the nodes not happen?

Each node stores only its customers' data.

[Ljapunov]

Sounds like what you want are three separate elasticsearch-clusters instead of a single cluster (formed of three elasticsearch-nodes).
Otherwise please rephrase your question and add some more information.

Actually what you see is what elasticsearch does. It spreads it's data over all the nodes in it's cluster.

[sholzhauer]

@Ljapunov

Actually what you see is what elasticsearch does. It spreads it's data over all the nodes in it's cluster.

What @Ljapunov said is absolutely true, and you should never do what I am about to suggest for your usecase. But if you really really really want to you could use the api to stop shard reallocation/balancing.

KEEP IN MIND THIS BREAKS A LOT OF THINGS

READ THAT AGAIN!

This option stops foundational functionality of elasticsearch and is not just for your specific indices but for ALL indices. Please read up on the docs of shard allocation and balancing before doing this.

But if you really want to:

PUT _cluster/settings
{
  "transient" : {
    "cluster.routing.allocation.enable": "none",
    "cluster.routing.rebalance.enable" : "none"
  }
}