# Configure slowlog

**URL:** <https://discuss.elastic.co/t/configure-slowlog/55502>\
**Category:** Elasticsearch\
**Created:** [July 14, 2016, 9:54am UTC](https://discuss.elastic.co/t/configure-slowlog/55502 "2016-07-14T09:54:11Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![cirot87](https://avatars.discourse-cdn.com/v4/letter/c/b782af/32.png) [@cirot87](https://discuss.elastic.co/u/cirot87)\
**Post date:** [July 14, 2016, 9:54am UTC](https://discuss.elastic.co/t/configure-slowlog/55502/1 "2016-07-14T09:54:11Z")

</div>

Hi,  
my purpose is to configure this settings on my ES:

```
    index.search.slowlog.threshold.query.warn: 10s
    index.search.slowlog.threshold.query.info: 5s
    index.search.slowlog.threshold.query.debug: 2s
    index.search.slowlog.threshold.query.trace: 500ms
  
    index.search.slowlog.threshold.fetch.warn: 1s
    index.search.slowlog.threshold.fetch.info: 800ms
    index.search.slowlog.threshold.fetch.debug: 500ms    
    index.search.slowlog.threshold.fetch.trace: 200ms
 
    index.indexing.slowlog.threshold.index.warn: 10s
    index.indexing.slowlog.threshold.index.info: 5s
    index.indexing.slowlog.threshold.index.debug: 2s
    index.indexing.slowlog.threshold.index.trace: 500ms

```

In my system i have 1 tribe node, 2 master node, 4 data node.

The questions are:  
1 - This commands are rights????  
2 - I need that all slowlog are actives in all my node.....for do this i need to modify all .yml files or i can set them in only one ?  
3 - I need to modify my logging.yml for save them?  
4 - For now i have insert this command in my elasticsearch.yml file, i my log i have a file for the slowlog but i have only a debug type, i try to set less time for saving but nothing is changed...someone can help me????

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [July 14, 2016, 9:58am UTC](https://discuss.elastic.co/t/configure-slowlog/55502/2 "2016-07-14T09:58:32Z")

</div>

> [@cirot87](#):
>
> 2 master node

This is not good. Read [Important Configuration Changes | Elasticsearch: The Definitive Guide [2.x] | Elastic](https://www.elastic.co/guide/en/elasticsearch/guide/2.x/important-configuration-changes.html#_minimum_master_nodes)

1. That looks ok.
2. You can also update this using `_cluster/settings` which negates having to update all nodes, plus it's dynamic.
3. No.
4. See 2.

---

<div class="post-metadata">

**Author:** ![cirot87](https://avatars.discourse-cdn.com/v4/letter/c/b782af/32.png) [@cirot87](https://discuss.elastic.co/u/cirot87)\
**Post date:** [July 14, 2016, 10:22am UTC](https://discuss.elastic.co/t/configure-slowlog/55502/3 "2016-07-14T10:22:46Z")

</div>

thanks for response.

I used this command \_cluster/settings on transient/persistent but nothing is changed.

I know about master node but for now i'm testing all log of elasticsearch also when one or more node are down.

Is there a reason why it saves only debug type ? or a settings that is necessary for active them all?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 10:35pm UTC](https://discuss.elastic.co/t/configure-slowlog/55502/4 "2017-07-05T22:35:40Z")

</div>


