Hello Team,
I am using ELK stack version 7.9.3 and sometimes I use to get below error when randomly ILM policy stops working and no new index with new date is created and data is getting piled in previous date index. When I have analyzed logs, I am getting below issue.
[2023-08-16T11:33:59,451][INFO ][o.e.x.i.IndexLifecycleTransition] [] moving index [logstash-sitecore-pimco-0-2023.08.08-000006] from [{"phase":"cold","action":"freeze","name":"freeze"}] to [{"phase":"cold","action":"complete","name":"complete"}] in policy [ilm-default]
[2023-08-16T11:37:29,114][ERROR][o.e.x.i.IndexLifecycleRunner] [] policy [ilm-default] for index [logstash-sitecore-pimco-0-2023.08.13-000011] failed on step [{"phase":"hot","action":"rollover","name":"check-rollover-ready"}]. Moving to ERROR step
java.lang.IllegalArgumentException: index.lifecycle.rollover_alias [logstash-sitecore-pimco] does not point to index [logstash-sitecore-pimco-0-2023.08.13-000011]
[2023-08-16T11:37:29,122][INFO ][o.e.x.i.IndexLifecycleRunner] [] policy [ilm-default] for index [logstash-sitecore-pimco] on an error step due to a transitive error, moving back to the failed step [check-rollover-ready] for execution. retry attempt [2430]
[2023-08-16T11:47:29,106][INFO ][o.e.x.i.IndexLifecycleRunner] [] policy [ilm-default] for index [logstash-sitecore-pimco-0-2023.08.13-000011] on an error step due to a transitive error, moving back to the failed step [check-rollover-ready] for execution. retry attempt [234]
[2023-08-16T11:47:29,114][ERROR][o.e.x.i.IndexLifecycleRunner] [] policy [ilm-default] for index [logstash-sitecore-pimco] failed on step [{"phase":"hot","action":"rollover","name":"check-rollover-ready"}]. Moving to ERROR step
java.lang.IllegalArgumentException: index.lifecycle.rollover_alias [logstash-sitecore] does not point to index [logstash-sitecore-pimco]
[2023-08-16T11:57:29,115][ERROR][o.e.x.i.IndexLifecycleRunner] [] policy [ilm-default] for index [logstash-sitecore-pimco-0-2023.08.13-000011] failed on step [{"phase":"hot","action":"rollover","name":"check-rollover-ready"}]. Moving to ERROR step
java.lang.IllegalArgumentException: index.lifecycle.rollover_alias [logstash-sitecore-pimco] does not point to index [logstash-sitecore-pimco-0-2023.08.13-000011]
Thanks and Regards,
Naman