Hi! I Use ELK 7.13.3. I was updated my cluster from 7.9.3 for fixet bug with datastream deliting.
I have datastream which storing 7/14/30/60 days. I was change ILM policy and removed rollover step. Now I have only delete step.
PUT _ilm/policy/delete-after-7days
{
"policy": {
"phases": {
"hot": {
"min_age": "0ms",
"actions": {
"set_priority": {
"priority": 100
}
}
},
"delete": {
"min_age": "7d",
"actions": {
"delete": {
"delete_searchable_snapshot": true
}
and I faced with error for all my indexes which was create before last changes ILM.
Suppressed: java.lang.IllegalArgumentException: step [{\"phase\":\"hot\",\"action\":\"rollover\",\"name\":\"attempt-rollover\"}] for index [.ds-logstash-cdn-nginx-2021.07.16-2021.07.16-000001] with policy [delete-after-7days] does not exist",
"\tat org.elasticsearch.xpack.ilm.IndexLifecycleTransition.validateTransition(IndexLifecycleTransition.java:85) ~[?:?]",
ILM doesn't work for all old indexes and didn't clear old logs.
Why this happen and could i fix this situation?