Index is not moving to warm phase

Elastic Stack Elasticsearch
1

I have an index, i have implemented ILM on that. I am not seeing index is not moving to warm phase after reaching out 8 days old. There are no errors to.

{
  "emailer-lifecycle-policy" : {
    "version" : 1,
    "modified_date" : "2023-02-06T05:24:39.945Z",
    "policy" : {
      "phases" : {
        "warm" : {
          "min_age" : "8d",
          "actions" : {
            "set_priority" : {
              "priority" : 50
            }
          }
        },
        "cold" : {
          "min_age" : "60d",
          "actions" : {
            "allocate" : {
              "number_of_replicas" : 0,
              "include" : { },
              "exclude" : { },
              "require" : { }
            },
            "set_priority" : {
              "priority" : 0
            }
          }
        },
        "hot" : {
          "min_age" : "0ms",
          "actions" : {
            "set_priority" : {
              "priority" : 100
            },
            "rollover" : {
              "max_age" : "7d"
            }
          }
        },
        "delete" : {
          "min_age" : "90d",
          "actions" : {
            "delete" : {
              "delete_searchable_snapshot" : true
            }
          }
        }
      }
    },
    "in_use_by" : {
      "indices" : [
        "emailer-logs-2023.02.06-000001",
        "emailer-logs-2023.02.06-000002"
      ],
      "data_streams" : [ ],
      "composable_templates" : [
        "emailer-index-template"
      ]
    }
  }
}

This is the policy. Index got created on 6th of this month so it has to reach to warm phase on 14th or 15th, but still i see data in in hot phase.

2

Hi @rahul_sirugudi
I think you are falling fir a common misconception.

ILM moving to warm is calculated from the rollover date.

So index created on 6th.
Hot says rollover after 7days
So index rolls over on 13th
Warm says 8 days from rollover so that will be 13th + 8 days ..
So around the 21st.

See here

The min_age value is relative to the rollover time, not the index creation time

You can also use the _ilm/explain API to get a better explanation of what it's going on.

2 Likes
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.