FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
FortiKoala
Staff
Staff
Article Id 197495
Description

Use Elasticsearch kopf to post a "_flush" command


Scope

FAQ


Solution

When working on a large ZoneFox inplementation, you can speed up the time to restart Elastsearch by posting a _flush command beforehand.


The flush API allows you to flush one or more indices. The flush process of an index basically frees memory from the index by flushing data to the index storage and clearing the internal transaction log.


To do this:


  1. In a browser, go to your Elasticsearch instance, and use the kopf plugin, for example
    http://db.example.com:9200/_plugin/kopf
  2. Select the rest tab
  3. Type in the command:  _flush
  4. Use the dropdown list to change the request type to POST
  5. Click on the send button below the query text.




Contributors