Resetting Elasticsearch

Perform a reset if the state of Elasticsearch and [legacy] Historical Metrics needs to be cleared (such as if an index is deleted and erroneously recreated without the Swarm schema). A reset is a method to delete an index and refresh a feed safely, by deleting feeds before removing index data.

Important

Gateway must be restarted when the primary search feed is changed in Swarm Storage.

  1. [legacy] Set Swarm's configuration setting metrics.target to blank using SNMP or REST.

    curl -i -u admin:PASSWORD -XPUT "http://SWARM·NODE:91/api/storage/clusters/CLUSTER·NAME/settings/metrics.target?value="
  2. Delete the current Search Feed definition in the Swarm UI.

  3. Delete the Swarm search index. 

    1. Use the following command to determine the Swarm search index:

      curl http://ES·NODE:9200/_cat/indices | grep 'index_SWARM·CLUSTER·NAME'
    2. Run the following command to delete the Swarm search index:

      curl -X DELETE http://ES·NODE:9200/SWARM·SEARCH·INDEX
  4. [legacy] Delete historical metrics indices as needed.
    The following command deletes all metrics indices. Verify the glob pattern to avoid deleting the needed indices. 

  5. Create a new Search Feed definition pointing to the ES servers in the UI (Swarm UI or legacy Admin Console). This step creates the feed using the Swarm schema.

  6. [legacy] Reinitialize the curator.

  7. [legacy] Reset the Swarm setting metrics.target back to the correct value using SNMP or REST.

 

© DataCore Software Corporation. · https://www.datacore.com · All rights reserved.