As a rule, unless backing up using the online methods supported by mongodb and ES (there are several ways of doing that, none as simple as copying the data dir), the safest way is always to stop the server before backing up.