Dear All, I am facing below error in 8.11 and 8.13 version of elasticsearch Elasticsearch.log file continuously. Please help me to solve this issue.
- I think this is system index restored_kibana-event-log-ds. what is the use of this index and how to solve this issue permanently .
<[ERROR][o.e.d.l.DataStreamLifecycleService] [ElasticHost] Data stream lifecycle encountered an error trying to rollover data
steam [restored_kibana-event-log-ds]
Failing since [1721058146305], operation retried [610] times
java.lang.IllegalArgumentException: no matching index template found for data stream [restored_kibana-event-log-ds]
at org.elasticsearch.cluster.metadata.MetadataCreateDataStreamService.lookupTemplateForDataStream(MetadataCreateDataStreamService.java:431) ~[elastic
search-8.13.4.jar:?]
at org.elasticsearch.action.admin.indices.rollover.MetadataRolloverService.rolloverDataStream(MetadataRolloverService.java:266) ~[elasticsearch-8.13.
4.jar:?]
at org.elasticsearch.action.admin.indices.rollover.MetadataRolloverService.rolloverClusterState(MetadataRolloverService.java:128) ~[elasticsearch-8.1
3.4.jar:?]
at org.elasticsearch.action.admin.indices.rollover.TransportRolloverAction$RolloverExecutor.executeTask(TransportRolloverAction.java:405) ~[elasticse
arch-8.13.4.jar:?]
at org.elasticsearch.action.admin.indices.rollover.TransportRolloverAction$RolloverExecutor.execute(TransportRolloverAction.java:341) ~[elasticsearch
-8.13.4.jar:?]
at org.elasticsearch.cluster.service.MasterService.innerExecuteTasks(MasterService.java:1039) ~[elasticsearch-8.13.4.jar:?]
at org.elasticsearch.cluster.service.MasterService.executeTasks(MasterService.java:1004) ~[elasticsearch-8.13.4.jar:?]
at org.elasticsearch.cluster.service.MasterService.executeAndPublishBatch(MasterService.java:232) ~[elasticsearch-8.13.4.jar:?]
at org.elasticsearch.cluster.service.MasterService$BatchingTaskQueue$Processor.lambda$run$2(MasterService.java:1626) ~[elasticsearch-8.13.4.jar:?]
at org.elasticsearch.action.ActionListener.run(ActionListener.java:356) ~[elasticsearch-8.13.4.jar:?]
at org.elasticsearch.cluster.service.MasterService$BatchingTaskQueue$Processor.run(MasterService.java:1623) ~[elasticsearch-8.13.4.jar:?]
at org.elasticsearch.cluster.service.MasterService$5.lambda$doRun$0(MasterService.java:1237) ~[elasticsearch-8.13.4.jar:?]
at org.elasticsearch.action.ActionListener.run(ActionListener.java:356) ~[elasticsearch-8.13.4.jar:?]
at org.elasticsearch.cluster.service.MasterService$5.doRun(MasterService.java:1216) ~[elasticsearch-8.13.4.jar:?]
at org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRunnable.doRun(ThreadContext.java:984) ~[elasticsearch-8.13.4.jar:
?]
at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:26) ~[elasticsearch-8.13.4.jar:?]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144) ~[?:?]
[2024-07-18T00:07:26,387][INFO ][o.e.x.i.IndexLifecycleRunner] [ElasticHost] policy [kibana-event-log-policy] for index [restored_kibana-event-log-7.1
7.9-000002] on an error step due to a transient error, moving back to the failed step [check-rollover-ready] for execution. retry attempt [4439]
[2024-07-18T00:17:26,385][ERROR][o.e.x.i.IndexLifecycleRunner] [ElasticHost] policy [kibana-event-log-policy] for index [restored_kibana-event-log-7.1
7.9-000002] failed on step [{"phase":"hot","action":"rollover","name":"check-rollover-ready"}]. Moving to ERROR step
java.lang.IllegalArgumentException: index.lifecycle.rollover_alias [.kibana-event-log-7.17.9] does not point to index [restored_kibana-event-log-7.17.9-0
00002]
at org.elasticsearch.xpack.core.ilm.WaitForRolloverReadyStep.evaluateCondition(WaitForRolloverReadyStep.java:174) ~[?:?]
at org.elasticsearch.xpack.ilm.IndexLifecycleRunner.runPeriodicStep(IndexLifecycleRunner.java:235) ~[?:?]
at org.elasticsearch.xpack.ilm.IndexLifecycleService.triggerPolicies(IndexLifecycleService.java:430) ~[?:?]
at org.elasticsearch.xpack.ilm.IndexLifecycleService.triggered(IndexLifecycleService.java:358) ~[?:?]
at org.elasticsearch.common.scheduler.SchedulerEngine.notifyListeners(SchedulerEngine.java:192) ~[elasticsearch-8.13.4.jar:?]
at org.elasticsearch.common.scheduler.SchedulerEngine$ActiveSchedule.run(SchedulerEngine.java:226) ~[elasticsearch-8.13.4.jar:?]
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:572) ~[?:?]
at java.util.concurrent.FutureTask.run(FutureTask.java:317) ~[?:?]
at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:304) ~[?:?]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144) ~[?:?]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642) ~[?:?]
at java.lang.Thread.run(Thread.java:1583) ~[?:?]>
Thanks in advance for your time and help.