As seen earlier, the task of allocation of good machines to the desired index can be done using the curator tool, shown as follows:
curator --host <IP> allocation --rule memory=16G indices --timestring '%Y-%M-%D' --prefix "logstash-" --newer-than 2 --time-unit days
Here, we are telling curator to move all the indexes that are newer than the past 2 days to nodes that have memory attribute as the 16G
value. With this process, the latest indices would be moved to better hardware, as follows:
curator --host <IP> allocation --rule ram=8G indices --timestring '%Y-%M-%D' --prefix "logstash-" --older-than 2 --time-unit days
We also need to run the preceding command to make sure that the rest of indices are moved to normal nodes that have only 8GB main memory.