Just dragged our ELK stack up to 7.0 from 6.5 and I'm unimpressed with @elastic cluster.max_shards_per_node being set to 1000, we generate about 1000 shards per month and on our 4 node cluster that works really well for us.
1
1) it's a soft limit. change it if you have to
2) that's a surprising number of shards. we generally recommend elastic.co/blog/how-many-sha… for sizing that
3) why do you need so many? also rollover / ILM might be a better pattern to use?
2
1
3
Our definitions of hard and soft obviously vary, if something stops your from going over a limit in my book it's a hard limit. Soft would just throw loads of warnings at you. Thankfully you guys are very helpful on the forums and I stumbled across discuss.elastic.co/t/number-…
Jul 4, 2019 · 2:32 PM UTC