I am looking at standing up a new Elasticsearch cluster and migrating from our current single node. What's the best way for moving our existing data, about 10TB to the new cluster? Would CCR facilitate the move best? I've briefly read over the documentation and there's mention of leader indices, do they need to be deleted once migration is complete, or do I just turn off CCR when done and point all my Logstash instances to the new cluster?
I would recommend instead using snapshot and restore. Create a snapshot and move over older indices that are no longer written to, then switch your ingestion and start writing to the new cluster. You can then move the remaining indices over but may need to rename some indices when you restore them if new indices with the same name has already been created by the ingestion of new data.
Any kind of special treatment for indices created via data streams?