Where does Elasticsearch store its data?

elasticsearch kibana kibana-4
sliders_alpha picture sliders_alpha · Oct 23, 2015 · Viewed 46.1k times · Source

So I have this Elasticsearch installation, in insert data with logstash, visualize them with kibana.

Everything in the conf file is commented, so it's using the default folders which are relative to the elastic search folder.

1/ I store data with logstash
2/ I look at them with kibana
3/ I close the instance of elastic seach, kibana and logstash
4/ I DELETE their folders
5/ I re-extract everything and reconfigure them
6/ I go into kibana and the data are still there

How is this possible?

This command will however delete the data : curl -XDELETE 'http://127.0.0.1:9200/_all'

Thanks.

ps : forgot to say that I'm on windows

Answer

Val picture Val · Oct 23, 2015

If you've installed ES on Linux, the default data folder is in /var/lib/elasticsearch (CentOS) or /var/lib/elasticsearch/data (Ubuntu)

If you're on Windows or if you've simply extracted ES from the ZIP/TGZ file, then you should have a data sub-folder in the extraction folder.

Related questions

Elasticsearch is still initializing the kibana index

When I am trying to start Kibana I am facing the following issue. I first restarted my elasticsearch server it was running successfully. After starting Elasticsearch I tried to start Kibana but no luck. {"name":"Kibana","hostname":"ABCD","pid":3848,"level":30,"…

Read More
Kibana - How to display log as table

I'm testing Kibana 4 for a project. I have created an index from my database table which is composed by 3 fields: Date User Action I would like to display my index as a simple table (3 column, N rows) in my dashboard. …

Read More
Courier Fetch: shards failed

Why do I get these warnings after adding more data to my elasticsearch? And the warnings are different every time I browse the dashboard. "Courier Fetch: 30 of 60 shards failed." More details: It's a sole node on a CentOS 7.1 /etc/elasticsearch/…

Read More