Do ILM life time policies get reapplied to existing indexes?

Elastic Stack Elasticsearch
1

Hello

I was using daily named indexes (yyyy.mm.dd) with a 180 day retention period but in august I changed to a monthy (yyyy.mm) and adjusted the retention period to 210ish days in order to keep the 180 retention period.

Today, 180 days ago, is may 13 2021. I would expect THOSE daily logs to be deleted 180 days later while my monthly ones to be deleted 210 days later but Im seeing that the daily ones are not being deleted.

Is there a reason for this? Am I missing a concept here?

2

Can you show us your policy?

3

Can you show us your policy?

4

Sure.

What would be the best way/format to show it ?

5

OK, I think this is the best way:

{
  "logs-ilp" : {
    "version" : 4,
    "modified_date" : "2021-09-01T09:06:02.218Z",
    "policy" : {
      "phases" : {
        "hot" : {
          "min_age" : "0ms",
          "actions" : {
            "set_priority" : {
              "priority" : 100
            }
          }
        },
        "delete" : {
          "min_age" : "210d",
          "actions" : { }
        }
      }
    }
  }
}

As you can see, its set for 210d ; This is when I changed to monthly (september it seems). From the start to septemer, it was set for 180d.

My question is that, are the old daily indexes getting 180d or 210d? I know the new monthly ones have to be getting 210d

6

If any more information is needed or missing, please let me know.

Thank you

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.