Is there a way to track which index templates were used/applied for the creation of an index?
When an index is created, this message is logged that lists templates applied.
creating index, cause [auto(bulk api)], templates [our-metricbeat, metricbeat-6.7.1], shards [1]/[1], mappings [doc]
I think the templates are listed in descending "order" value.
Thanks!
How can I view the log?
The default location is /var/log/elasticsearch, it creates a new file at least daily.
You can also ingest these logs with the filebeat elasticsearch module. We ingest these and logstash logs for consolidated log views. At least any (data?) node can create the index, so you have to look at all their logs to find them.
You need to be cautious when ingesting these logs, any error could log another event to ingest creating a runaway log loop. It might be better to send them to a monitoring cluster.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.