KIbana indicies always missing by a random time

Hi

i still cant find the solution for this issue,
can anybody help me.
my indices always reset, so i always miss logdata in kibana for the past days, even the data in log servers still exist.

here the configuration

{
"indices" : {
"filebeat-7.8.1-2020.11.25" : {
"index" : "filebeat-7.8.1-2020.11.25",
"managed" : true,
"policy" : "filebeat*",
"lifecycle_date_millis" : 1606293106681,
"age" : "44.78m",
"phase" : "hot",
"phase_time_millis" : 1606295676745,
"action" : "rollover",
"action_time_millis" : 1606293277252,
"step" : "check-rollover-ready",
"step_time_millis" : 1606295676745,
"is_auto_retryable_error" : true,
"failed_step_retry_count" : 2,
"phase_execution" : {
"policy" : "filebeat*",
"phase_definition" : {
"min_age" : "0ms",
"actions" : {
"rollover" : {
"max_size" : "50gb",
"max_age" : "30d"
},
"set_priority" : {
"priority" : 100
}
}
},
"version" : 1,
"modified_date_in_millis" : 1606287894714
}
}
}
}

You might want to try building the ILM policy you want with the Kibana UI, and then look at the policy it creates to get some ideas about building your own - or just build the one you want with the Kibana UI! :slight_smile:

see: https://www.elastic.co/guide/en/elasticsearch/reference/7.10/set-up-lifecycle-policy.html

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.