Resetting Elasticsearch

Perform a reset if the state of Elasticsearch and [legacy] Historical Metrics needs to be cleared (such as if an index is deleted and erroneously recreated without the Swarm schema). A reset is a method to delete an index and refresh a feed safely, by deleting feeds before removing index data.

1. [legacy] Set Swarm's configuration setting metrics.target to blank using SNMP or REST.

   curl -i -u admin:PASSWORD -XPUT "http://SWARM·NODE:91/api/storage/clusters/CLUSTER·NAME/settings/metrics.target?value="

2. Delete the current Search Feed definition in the Swarm UI.

3. Delete the Swarm search index. 

   1. Use the following command to determine the Swarm search index:

      curl http://ES·NODE:9200/_cat/indices | grep 'index_SWARM·CLUSTER·NAME'

   2. Run the following command to delete the Swarm search index:

      curl -X DELETE http://ES·NODE:9200/SWARM·SEARCH·INDEX

4. [legacy] Delete historical metrics indices as needed.
   The following command deletes all metrics indices. Verify the glob pattern to avoid deleting the needed indices. 

5. Create a new Search Feed definition pointing to the ES servers in the UI (Swarm UI or legacy Admin Console). This step creates the feed using the Swarm schema.

6. [legacy] Reinitialize the curator.

7. [legacy] Reset the Swarm setting metrics.target back to the correct value using SNMP or REST.