Hi,
I have a requirement where I don't want to delete all the entires of APM after certain date, rather I want to delete apm index entries per service level based on dates.
Is there lever from curator etc which helps me achieve this?
I think technically you could do that with Curator, by using the Reindex action, but I don't think it would be the ideal approach.
Instead, I'd recommend that you:
- split events into service-specific indices (see How to create index for each service?)
- create service-specific ILM policies (https://www.elastic.co/guide/en/apm/server/current/ilm.html#custom-ilm-policy)
1 Like
This was useful. Thanks!!
I need one more information, in the APM settings UI, there is Agent Configuration and Indices.
The Indices configuration suggests how APM UI queries and by default all are set ti "apm-*"
How can make the APM UI also query specific to service? so that query via APM UI is also optimized.
The UI already queries per-service where applicable, by searching for service.name: <service-name-in-context>. This should already be quite fast. Are you observing performance issues in the UI, or is this more hypothetical?
There are some optimisations that can be made by hand, bu it's not something that we test or support out of the box: since you are separating indices by service, you could change the service.name field's type to constant_keyword. This would enable more efficient service-specific queries in Elasticsearch.
This topic was automatically closed 20 days after the last reply. New replies are no longer allowed.