# Elastic ILM is not rolling

**URL:** <https://discuss.elastic.co/t/elastic-ilm-is-not-rolling/254527>\
**Category:** Elasticsearch\
**Tags:** ilm-index-lifecycle-management\
**Created:** [November 6, 2020, 1:18pm UTC](https://discuss.elastic.co/t/elastic-ilm-is-not-rolling/254527 "2020-11-06T13:18:29Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheHunter1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thehunter1/32/80190_2.png) [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Post date:** [November 6, 2020, 1:18pm UTC](https://discuss.elastic.co/t/elastic-ilm-is-not-rolling/254527/1 "2020-11-06T13:18:29Z")

</div>

Hello,

I have configured my ILM to rollover when the indice size be 20GB or after passing 30 days in the hot node as it's mentioned in this pic :

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/1/6158c6d6c98d89fb8b2359583599340ed01cbdd6.png)

but my indice passed 20GB and still didn't pass to the cold node:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/8/0/8078e48b57c9c7899bc1a1b02a3ac5901b36ddde.png)

and when I run: `GET _cat/indices?v` I get:

```auto
green open packetbeat-7.9.2-2020.10.22-000001 RRAnRZrrRZiihscJ3bymig 10 1 63833049 0 44.1gb 22gb

```

Knowing that in my packetbeat file configuration, I have just changed the number of shards:

```auto
setup.template.settings:
  index.number_of_shards: 10
  index.number_of_replicas: 1

```

when I run the command `GET packetbeat-7.9.2-2020.10.22-000001/_settings ` I get something like that:

```auto
{
  "packetbeat-7.9.2-2020.10.22-000001" : {
    "settings" : {
      "index" : {
        "lifecycle" : {
          "name" : "packetbeat",
          "rollover_alias" : "packetbeat-7.9.2"
        },
        "routing" : {
          "allocation" : {
            "include" : {
              "_tier_preference" : "data_content"
            }
          }
        },
        "mapping" : {
          "total_fields" : {
            "limit" : "10000"
          }
        },
        "refresh_interval" : "5s",
        "number_of_shards" : "10",
        "provided_name" : "<packetbeat-7.9.2-{now/d}-000001>",
        "max_docvalue_fields_search" : "200",
        "query" : {
          "default_field" : [
            "message",
            "tags",
            "agent.ephemeral_id",
            "agent.id",
            "agent.name",
            "agent.type",
            "agent.version",
            "as.organization.name",
            "client.address",
            "client.as.organization.name",

```

and the output of the command `GET /packetbeat-7.9.2-2020.10.22-000001/_ilm/explain ` is :

```auto
{
  "indices" : {
    "packetbeat-7.9.2-2020.10.22-000001" : {
      "index" : "packetbeat-7.9.2-2020.10.22-000001",
      "managed" : true,
      "policy" : "packetbeat",
      "lifecycle_date_millis" : 1603359683835,
      "age" : "15.04d",
      "phase" : "hot",
      "phase_time_millis" : 1603359684332,
      "action" : "rollover",
      "action_time_millis" : 1603360173138,
      "step" : "check-rollover-ready",
      "step_time_millis" : 1603360173138,
      "phase_execution" : {
        "policy" : "packetbeat",
        "phase_definition" : {
          "min_age" : "0ms",
          "actions" : {
            "rollover" : {
              "max_size" : "50gb",
              "max_age" : "30d"
            }
          }
        },
        "version" : 1,
        "modified_date_in_millis" : 1603359683339
      }
    }
  }
}

```

I see that the `max_size=50gb` but in kibana I had configured it to be `20gb` as it's shown in the first picture.

Could you tell me how can I solve this problem please!  
Thanks for your help

---

<div class="post-metadata">

**Author:** ![TheHunter1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thehunter1/32/80190_2.png) [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Post date:** [November 12, 2020, 4:15pm UTC](https://discuss.elastic.co/t/elastic-ilm-is-not-rolling/254527/2 "2020-11-12T16:15:18Z")

</div>

Can someone help me with this please !!

---

<div class="post-metadata">

**Author:** ![TheHunter1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thehunter1/32/80190_2.png) [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Post date:** [November 17, 2020, 10:39am UTC](https://discuss.elastic.co/t/elastic-ilm-is-not-rolling/254527/3 "2020-11-17T10:39:02Z")

</div>

I solved my problem, thanks for @Vidit who helped me to figure out what was the problem.  
So to solve my problem I had just to delete the policy from the index after that I edited the policy, and then added the index life policy for that index again.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 15, 2020, 10:39am UTC](https://discuss.elastic.co/t/elastic-ilm-is-not-rolling/254527/4 "2020-12-15T10:39:10Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.