ILM Policy Shard Allocation on the same node

Elastic Stack Elasticsearch
1

Have I already try to look at this kind of question in the community?
I would say yes. Most of them got red status cluster, but in my case

  • There are 3 nodes HOT WARM COLD respectively from node 1 to node 3

  • I add data to ELK stack, but my shard is located on WARM/COLD instead of HOT. I have no idea about this.

  • shard allocation NOT ALLOW because my shard is in WARM node and it tries to reallocate from HOT to WARM (allocation in the same node)
    *Note ''' "can_remain_on_current_node": "no" ''' I see this option in Cluster api Is it possible to set because I didn't see this field in my result? or Is it already deprecated?

2

What does your policy look like?

3 
{
  "1week" : {
    "version" : 1,
    "modified_date" : "2020-06-01T03:14:13.860Z",
    "policy" : {
      "phases" : {
        "warm" : {
          "min_age" : "0ms",
          "actions" : {
            "allocate" : {
              "include" : { },
              "exclude" : { },
              "require" : {
                "box_type" : "hot"
              }
            },
            "shrink" : {
              "number_of_shards" : 1
            },
            "set_priority" : {
              "priority" : 50
            }
          }
        },
        "cold" : {
          "min_age" : "3d",
          "actions" : {
            "set_priority" : {
              "priority" : 0
            }
          }
        },
        "hot" : {
          "min_age" : "0ms",
          "actions" : {
            "rollover" : {
              "max_size" : "5gb",
              "max_age" : "2d"
            },
            "set_priority" : {
              "priority" : 100
            }
          }
        },
        "delete" : {
          "min_age" : "5d",
          "actions" : {
            "delete" : { }
          }
        }
      }
    }
  }
}

image
each phrase will have something like this and I set it according to the phrase. Ex. in warm phrase box_typr will be warm.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.