Skip to main content
FortiKoala
Staff
Staff
March 1, 2019

Technical Note: ZoneFox 3 - Use Elasticsearch kopf to post a "_flush" command

  • March 1, 2019
  • 0 replies
  • 946 views
Description

Use Elasticsearch kopf to post a "_flush" command


Scope

FAQ


Solution

When working on a large ZoneFox inplementation, you can speed up the time to restart Elastsearch by posting a _flush command beforehand.


The flush API allows you to flush one or more indices. The flush process of an index basically frees memory from the index by flushing data to the index storage and clearing the internal transaction log.


To do this:


  1. In a browser, go to your Elasticsearch instance, and use the kopf plugin, for example
    http://db.example.com:9200/_plugin/kopf
  2. Select the rest tab
  3. Type in the command:  _flush
  4. Use the dropdown list to change the request type to POST
  5. Click on the send button below the query text.




Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.