Hi Con -
Our basic license defaults the marvel indices to 7 days of data and no option to extend that retention policy. Is this what you're observing?
and Yes, you need to install marvel-agent on both clusters.
- Install marvel-agent on secondary cluster
- Disable local collection marvel.agent.interval: -1
- Set marvel.history.duration
If you know how many days of marvel indices that you want to keep, it is as simple as configuring the following marvel.agent options in a node’s elasticsearch.yml file to control how Marvel data is collected from the node:
marvel.history.duration
Sets the retention duration beyond which the indices created by Marvel will be automatically deleted. Defaults to 7 days. Set to -1 to disable automatic deletion of Marvel indices.
For more marvel configuration options, please visit
https://www.elastic.co/guide/en/marvel/current/configuration.html
Hope this helps,
Bohyun