New

The executive guide to generative AI

Read more
About usPartnersSupport|Login
IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.
« Overview Automatically following indices »
Elastic Docs ›Elasticsearch Guide [7.4] ›Set up a cluster for high availability ›Cross-cluster replication

Requirements for leader indices

edit

Requirements for leader indices

edit

Cross-cluster replication works by replaying the history of individual write operations that were performed on the shards of the leader index. This means that the history of these operations needs to be retained on the leader shards so that they can be pulled by the follower shard tasks. The underlying mechanism used to retain these operations is soft deletes. A soft delete occurs whenever an existing document is deleted or updated. By retaining these soft deletes up to configurable limits, the history of operations can be retained on the leader shards and made available to the follower shard tasks as it replays the history of operations.

Soft deletes must be enabled for indices that you want to use as leader indices. Soft deletes are enabled by default on new indices created on or after Elasticsearch 7.0.0.

This means that cross-cluster replication can not be used on existing indices. If you have existing data that you want to replicate from another cluster, you must reindex your data into a new index with soft deletes enabled.

Soft delete settings

edit
index.soft_deletes.enabled
Whether or not soft deletes are enabled on the index. Soft deletes can only be configured at index creation and only on indices created on or after 6.5.0. The default value is true.
index.soft_deletes.retention_lease.period
The maximum period to retain a shard history retention lease before it is considered expired. Shard history retention leases ensure that soft deletes are retained during merges on the Lucene index. If a soft delete is merged away before it can be replicated to a follower the following process will fail due to incomplete history on the leader. The default value is 12h.

For more information about index settings, see Index modules.

Setting soft deletes on indices created by APM Server or Beats

edit

If you want to replicate indices created by APM Server or Beats, and are allowing APM Server or Beats to manage index templates, you need to configure soft deletes on the underlying index templates. To configure soft deletes on the underlying index templates, incorporate the following changes to the relevant APM Server or Beats configuration file.

setup.template.overwrite: true
setup.template.settings:
  index.soft_deletes.retention.operations: 1024

For additional information on controlling the index templates managed by APM Server or Beats, see the relevant documentation on loading the Elasticsearch index template.

Setting soft deletes on indices created by Logstash

edit

If you want to replicate indices created by Logstash, and are using Logstash to manage index templates, you need to configure soft deletes on a custom Logstash index template. To configure soft deletes on the underlying index template, incorporate the following change to a custom Logstash template.

{
  "settings" : {
    "index.soft_deletes.retention.operations" : 1024
  }
}

Additionally, you will need to configure the Elasticsearch output plugin to use this custom template.

output {
  elasticsearch {
    template => "/path/to/custom/logstash/template.json"
  }
}

For additional information on controlling the index templates managed by Logstash, see the relevant documentation on the Elasticsearch output plugin.

« Overview Automatically following indices »