We are working on updating this book for the latest version. Some content might be out of date.
Create, index, and delete requests are write operations, which must be successfully completed on the primary shard before they can be copied to any associated replica shards, as shown in Figure 9, “Creating, indexing, or deleting a single document”.
The client sends a create, index, or delete request to
The node uses the document’s
_idto determine that the document belongs to shard
0. It forwards the request to
Node 3, where the primary copy of shard
0is currently allocated.
Node 3executes the request on the primary shard. If it is successful, it forwards the request in parallel to the replica shards on
Node 2. Once all of the replica shards report success,
Node 3reports success to the coordinating node, which reports success to the client.
By the time the client receives a successful response, the document change has been executed on the primary shard and on all replica shards. Your change is safe.
There are a number of optional request parameters that allow you to influence this process, possibly increasing performance at the cost of data security. These options are seldom used because Elasticsearch is already fast, but they are explained here for the sake of completeness:
By default, the primary shard requires a quorum, or majority, of shard copies (where a shard copy can be a primary or a replica shard) to be available before even attempting a write operation. This is to prevent writing data to the “wrong side” of a network partition. A quorum is defined as follows:
int( (primary + number_of_replicas) / 2 ) + 1
The allowed values for
one(just the primary shard),
all(the primary and all replicas), or the default
quorum, or majority, of shard copies.
Note that the
number_of_replicasis the number of replicas specified in the index settings, not the number of replicas that are currently active. If you have specified that an index should have three replicas, a quorum would be as follows:
int( (primary + 3 replicas) / 2 ) + 1 = 3
But if you start only two nodes, there will be insufficient active shard copies to satisfy the quorum, and you will be unable to index or delete any documents.
What happens if insufficient shard copies are available? Elasticsearch waits,
in the hope that more shards will appear. By default, it will wait up to 1
minute. If you need to, you can use the
timeoutparameter to make it abort sooner:
100is 100 milliseconds, and
30sis 30 seconds.
A new index has
1 replica by default, which means that two active shard
copies should be required in order to satisfy the need for a
However, these default settings would prevent us from doing anything useful
with a single-node cluster. To avoid this problem, the requirement for
a quorum is enforced only when
number_of_replicas is greater than