Index not getting rolled over even when policy is applied

Elastic Stack Elasticsearch
1

I have applied a policy to my index , by which the index should get rolled over after 20 MB ..(Since i want to check whether it is getting rolled over i have set low storage size) Index is getting created but it is not getting rolled over after 20 MB storage size is reached.

Logstash config:

        output {
elasticsearch {
hosts => ["https://10.21.36.5:9200"]
# index => "test-axiom"
ilm_rollover_alias => "sort-axiom"
ilm_pattern => "{now/d}-000001"
ilm_policy => "policy-axiom"
document_id => "%{unqid}"
template => "/etc/logstash/templates/sort-axiom.json"
user => "elastic"
password => "Elk@1234"
ssl => true
ssl_certificate_verification => false
cacert => "/etc/logstash/ca.crt"
}
}

Index template applied

{
"index_patterns": ["sort-axiom-*"],
"settings" : {
"number_of_shards": 1,
"number_of_replicas": 0,
"index.routing.allocation.require.data": "hot",
"[index.lifecycle.name](http://index.lifecycle.name/)": "ploicy-axiom",
"index.lifecycle.rollover_alias": ""
"index" : {
"sort.field" : ["Received DateTime","msisdn"],
"sort.order" : ["desc","desc"]
}
},
"mappings": {
"properties": {
"Received DateTime": {
"type": "date"
},
"msisdn": {
"type": "keyword",
"doc_values": true
}
}
}
}
2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.