Hi there, I have an issue where this error is coming up. I see there are two other posts in the forums with similar issues but there have been no replies.
Here is my policy
{
"policy": "cwl-data",
"phase_definition": {
"min_age": "0ms",
"actions": {
"set_priority": {
"priority": 100
},
"rollover": {
"max_primary_shard_size": "50gb",
"max_age": "1d"
}
}
},
"version": 3,
"modified_date_in_millis": 1657711552303
}
Here is my ILM
PUT _ilm/policy/cwl-data
{
"policy": {
"phases": {
"hot": {
"min_age": "0ms",
"actions": {
"rollover": {
"max_primary_shard_size": "50gb",
"max_age": "1d"
},
"set_priority": {
"priority": 100
}
}
},
"delete": {
"min_age": "14d",
"actions": {
"delete": {
"delete_searchable_snapshot": true
}
}
}
}
}
}
Here are details of the index giving an issue
{
"cwl-data-2022.10.04-0001" : {
"aliases" : {
"cwl-data" : {
"is_write_index" : false
}
},
"mappings" : {
"properties" : {
"@id" : {
"type" : "text",
"fields" : {
"keyword" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"@log_group" : {
"type" : "text",
"fields" : {
"keyword" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"@log_stream" : {
"type" : "text",
"fields" : {
"keyword" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"@message" : {
"type" : "text",
"fields" : {
"keyword" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"@owner" : {
"type" : "text",
"fields" : {
"keyword" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"@severity" : {
"type" : "text",
"fields" : {
"keyword" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"@timestamp" : {
"type" : "date"
}
}
},
"settings" : {
"index" : {
"lifecycle" : {
"name" : "cwl-data",
"rollover_alias" : "cwl-data"
},
"routing" : {
"allocation" : {
"include" : {
"_tier_preference" : "data_content"
}
}
},
"number_of_shards" : "3",
"provided_name" : "cwl-data-2022.10.04-0001",
"creation_date" : "1664841609454",
"priority" : "100",
"number_of_replicas" : "1",
"uuid" : "xxxxxx",
"version" : {
"created" : "7170299"
}
}
}
}
}