Full warm blocks transition to delete

Elastic Stack Elasticsearch
1

HI,
I have ElasticSearch v"7.17.0"
1st day HOT
2nd day Warm
9nd day Delete

the problem is when WARM is full , DELETE phase is not working.
Shards are waiting for nodes to move to WARM and age above 9th day despite the configuration they should be deleted after 9th day.

the policy I set is:

PUT _ilm/policy/net_syslog_ne_fw
{
  "policy": {
    "phases": {
      "hot": {
        "min_age": "0ms",
        "actions": {
          "rollover": {
            "max_primary_shard_size": "30gb",
            "max_age": "1d"
          },
          "set_priority": {
            "priority": 100
          }
        }
      },
      "warm": {
        "min_age": "1d",
        "actions": {
          "set_priority": {
            "priority": 50
          }
        }
      },
      "delete": {
        "min_age": "9d",
        "actions": {
          "delete": {
            "delete_searchable_snapshot": true
          }
        }
      }
    }
  }
}

ilm explain provides this info:

"step_info" : {
"message" : "[net_syslog_ne_fw-002852] lifecycle action [migrate] waiting for [6] shards to be moved to the [data_warm] tier (tier migration preference configuration is [data_warm, data_hot])",

settings shows:

"_tier_preference" : "data_warm,data_hot"

but age of indexes is 29 days etc.

Do you have any advice ? Or is this correct behavior.

Thank you

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.