KIbana indicies always missing by a random time

Elastic Stack Kibana
, ,
1

Hi

i still cant find the solution for this issue,
can anybody help me.
my indices always reset, so i always miss logdata in kibana for the past days, even the data in log servers still exist.

here the configuration

Screenshot from 2020-11-25 16-23-43
Screenshot from 2020-11-25 16-23-431360×516 44.1 KB

2

{
"indices" : {
"filebeat-7.8.1-2020.11.25" : {
"index" : "filebeat-7.8.1-2020.11.25",
"managed" : true,
"policy" : "filebeat*",
"lifecycle_date_millis" : 1606293106681,
"age" : "44.78m",
"phase" : "hot",
"phase_time_millis" : 1606295676745,
"action" : "rollover",
"action_time_millis" : 1606293277252,
"step" : "check-rollover-ready",
"step_time_millis" : 1606295676745,
"is_auto_retryable_error" : true,
"failed_step_retry_count" : 2,
"phase_execution" : {
"policy" : "filebeat*",
"phase_definition" : {
"min_age" : "0ms",
"actions" : {
"rollover" : {
"max_size" : "50gb",
"max_age" : "30d"
},
"set_priority" : {
"priority" : 100
}
}
},
"version" : 1,
"modified_date_in_millis" : 1606287894714
}
}
}
}

3

You might want to try building the ILM policy you want with the Kibana UI, and then look at the policy it creates to get some ideas about building your own - or just build the one you want with the Kibana UI! :slight_smile:

see: https://www.elastic.co/guide/en/elasticsearch/reference/7.10/set-up-lifecycle-policy.html