elk: 7.17.3
01-03 nodes I want to use for hot data search and storage and 04-05 nodes as cold and frozen nodes.
I have read the es documentation. By default, the data of the collector will be sent to the data_content node. The 04-05 node is not configured with the data_content role. Why can it still be allocated to fragmented data?
I guess it keeps the cluster and some metadata, but looking at the screenshot, it should contain shard data.
ip name node.role
10.120.0.8 es-node04 cd
10.120.0.14 es-node02 dhilmrstw
10.120.0.38 es-node05 cd
10.120.0.10 es-node03 dhilmrstw
10.120.0.30 es-node01 dhilmrstw
I want to achieve this, all data is stored on hot nodes and only migrated to cold nodes after N days, during which time cold nodes should not save shards.