Hi
i still cant find the solution for this issue,
can anybody help me.
my indices always reset, so i always miss logdata in kibana for the past days, even the data in log servers still exist.
here the configuration
Hi
i still cant find the solution for this issue,
can anybody help me.
my indices always reset, so i always miss logdata in kibana for the past days, even the data in log servers still exist.
here the configuration
{
"indices" : {
"filebeat-7.8.1-2020.11.25" : {
"index" : "filebeat-7.8.1-2020.11.25",
"managed" : true,
"policy" : "filebeat*",
"lifecycle_date_millis" : 1606293106681,
"age" : "44.78m",
"phase" : "hot",
"phase_time_millis" : 1606295676745,
"action" : "rollover",
"action_time_millis" : 1606293277252,
"step" : "check-rollover-ready",
"step_time_millis" : 1606295676745,
"is_auto_retryable_error" : true,
"failed_step_retry_count" : 2,
"phase_execution" : {
"policy" : "filebeat*",
"phase_definition" : {
"min_age" : "0ms",
"actions" : {
"rollover" : {
"max_size" : "50gb",
"max_age" : "30d"
},
"set_priority" : {
"priority" : 100
}
}
},
"version" : 1,
"modified_date_in_millis" : 1606287894714
}
}
}
}
You might want to try building the ILM policy you want with the Kibana UI, and then look at the policy it creates to get some ideas about building your own - or just build the one you want with the Kibana UI!
see: https://www.elastic.co/guide/en/elasticsearch/reference/7.10/set-up-lifecycle-policy.html
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.