问题
Now I'm in a very problematic situation...
My data server has been hacked and now I can't request my elasticsearch server by curl or any other method. I have a bunch of very critical data which was not yet backuped (2 days late, hell, I didn't see the alert that backup failed).
I've tried to restart the service but no way, it say nothing and I get nothing in processes when I'm watching with ps. I think that comes from my hoster which runs my server in a secure mode...
So I tried to locate the physical files but I didn't find them. I've a non-customized install so in my config file, I have this :
# Path to directory where to store index data allocated for this node.
#
# path.data: /path/to/data
#
# Can optionally include more than one location, causing data to be striped across
# the locations (a la RAID 0) on a file level, favouring locations with most free
# space on creation. For example:
#
# path.data: /path/to/data1,/path/to/data2
Great explined but finally, where are my files ?
Is someone there who can help me ? Thanks in advance to all great people in this place
回答1:
The index files are in:
/var/lib/elasticsearch/nodes/0/indices/{nameOfYourIndex}/(0-4}/index
回答2:
I found them in /var/lib/elasticsearch/.
来源：https://stackoverflow.com/questions/24694201/where-are-data-files-of-elasticsearch-on-a-standard-debian-install