tinman alley

In 5.0 there is a tool which can be used to truncate corrupt translog files. This doesn't exist in 2.x but there is a workaround: POST my_index/_close PUT my_index/_settings { "index.engine.force_new_translog": true } POST my_index/_open PUT my_index/_settings { "index.engine.force_new_translog": false } NOTE: Any data in the corrupted translog will be lost.

I want to create a new Elasticsearch cluster. What are the recommended sizing guidelines? Answer: This is very much a use case dependent answer. The factors that should be taken into considerations are:

• How much data do you expect to index?
  • Frequency of new data.   How often is new data to be indexed?  Daily? Hourly?
  • Volume of new data.
• Retention policy.
  • How long do you want to keep the data.