Where are data files of elasticsearch on a standard debian install?

Question

Now I'm in a very problematic situation...

My data server has been hacked and now I can't request my elasticsearch server by curl or any other method. I have a bunch of very critical data which was not yet backuped (2 days late, hell, I didn't see the alert that backup failed).

I've tried to restart the service but no way, it say nothing and I get nothing in processes when I'm watching with ps. I think that comes from my hoster which runs my server in a secure mode...

So I tried to locate the physical files but I didn't find them. I've a non-customized install so in my config file, I have this :

# Path to directory where to store index data allocated for this node.
#
# path.data: /path/to/data
#
# Can optionally include more than one location, causing data to be striped across
# the locations (a la RAID 0) on a file level, favouring locations with most free
# space on creation. For example:
#
# path.data: /path/to/data1,/path/to/data2

Great explined but finally, where are my files ?

Is someone there who can help me ? Thanks in advance to all great people in this place

Answer 1

The index files are in:

/var/lib/elasticsearch/nodes/0/indices/{nameOfYourIndex}/(0-4}/index

Answer 2

I found them in /var/lib/elasticsearch/.