Elasticsearch version: 6.7.0
We have an issue with cluster log file rotation, it's creating log file every 10 mins and rolling the old one to *.log.gz
i have below setting in log4j2.properties
appender.rolling.type = RollingFile
appender.rolling.name = rolling
appender.rolling.fileName = {sys:es.logs.base_path}{sys:file.separator}{sys:es.logs.cluster_name}.log
appender.rolling.layout.type = PatternLayout
appender.rolling.layout.pattern = [%d{ISO8601}][%-5p][%-25c{1.}] [%node_name]%marker %.-10000m%n
appender.rolling.filePattern = {sys:es.logs.base_path}{sys:file.separator}{sys:es.logs.cluster_name}-%d{yyyy-MM-dd}-%i.log.gz
appender.rolling.policies.type = Policies
appender.rolling.policies.time.type = TimeBasedTriggeringPolicy
appender.rolling.policies.time.interval = 1
appender.rolling.policies.time.modulate = true
appender.rolling.policies.size.type = SizeBasedTriggeringPolicy
appender.rolling.policies.size.size = 128MB
appender.rolling.strategy.type = DefaultRolloverStrategy
appender.rolling.strategy.fileIndex = nomax
appender.rolling.strategy.action.type = Delete
appender.rolling.strategy.action.basepath = {sys:es.logs.base_path}
appender.rolling.strategy.action.condition.type = IfFileName
appender.rolling.strategy.action.condition.glob = {sys:es.logs.cluster_name}-*
appender.rolling.strategy.action.condition.nested_condition.type = IfAccumulatedFileSize
appender.rolling.strategy.action.condition.nested_condition.exceeds = 2GB
appender.rolling.strategy.action.condition.nested_condition.type = IfLastModified
appender.rolling.strategy.action.condition.nested_condition.age = 7D
it was working when we had Elasticsearch version 6.5.4 cluster, recently we have upgraded to 6.7.0 from then i see this issue, we have same configuration setting for log4j.properties file both clusters.
Someone please help what's wrong with my configuration, Thanks.
/var/log/elasticsearch
-rw-r--r--. 1 elasticsearch elasticsearch 2.4M Apr 12 05:02 escluster-elk-2019-04-12-87.log.gz
-rw-r--r--. 1 elasticsearch elasticsearch 2.3M Apr 12 05:03 escluster-elk-2019-04-12-88.log.gz
-rw-r--r--. 1 elasticsearch elasticsearch 2.3M Apr 12 05:05 escluster-elk-2019-04-12-89.log.gz
-rw-r--r--. 1 elasticsearch elasticsearch 2.4M Apr 12 01:29 escluster-elk-2019-04-12-8.log.gz
-rw-r--r--. 1 elasticsearch elasticsearch 2.3M Apr 12 05:06 escluster-elk-2019-04-12-90.log.gz
-rw-r--r--. 1 elasticsearch elasticsearch 2.3M Apr 12 05:08 escluster-elk-2019-04-12-91.log.gz
-rw-r--r--. 1 elasticsearch elasticsearch 2.4M Apr 12 05:09 escluster-elk-2019-04-12-92.log.gz
-rw-r--r--. 1 elasticsearch elasticsearch 2.4M Apr 12 05:11 escluster-elk-2019-04-12-93.log.gz
-rw-r--r--. 1 elasticsearch elasticsearch 2.3M Apr 12 05:12 escluster-elk-2019-04-12-94.log.gz
-rw-r--r--. 1 elasticsearch elasticsearch 2.3M Apr 12 05:14 escluster-elk-2019-04-12-95.log.gz
-rw-r--r--. 1 elasticsearch elasticsearch 2.3M Apr 12 05:15 escluster-elk-2019-04-12-96.log.gz
-rw-r--r--. 1 elasticsearch elasticsearch 2.3M Apr 12 05:17 escluster-elk-2019-04-12-97.log.gz
-rw-r--r--. 1 elasticsearch elasticsearch 2.4M Apr 12 05:18 escluster-elk-2019-04-12-98.log.gz
-rw-r--r--. 1 elasticsearch elasticsearch 2.3M Apr 12 05:20 escluster-elk-2019-04-12-99.log.gz
-rw-r--r--. 1 elasticsearch elasticsearch 2.5M Apr 12 01:32 escluster-elk-2019-04-12-9.log.gz
-rw-r--r--. 1 elasticsearch elasticsearch 0 Apr 4 18:27 escluster-elk_access.log
-rw-r--r--. 1 elasticsearch elasticsearch 0 Apr 4 18:27 escluster-elk_audit.log
-rw-r--r--. 1 elasticsearch elasticsearch 7.4K Apr 12 20:51 escluster-elk_deprecation.log
-rw-r--r--. 1 elasticsearch elasticsearch 0 Apr 4 18:27 escluster-elk_index_indexing_slowlog.log
-rw-r--r--. 1 elasticsearch elasticsearch 0 Apr 4 18:27 escluster-elk_index_search_slowlog.log
-rw-r--r--. 1 elasticsearch elasticsearch 78M Apr 12 23:11 escluster-elk.log
-rw-r--r--. 1 elasticsearch elasticsearch 65M Apr 7 13:40 gc.log.0
-rw-r--r--. 1 elasticsearch elasticsearch 2.9M Apr 12 23:25 gc.log.0.current
-rw-r--r--. 1 elasticsearch elasticsearch 65M Apr 9 20:25 gc.log.1
-rw-r--r--. 1 elasticsearch elasticsearch 65M Apr 11 12:30 gc.log.2
-rw-r--r--. 1 elasticsearch elasticsearch 15M Apr 11 20:53 gc.log.3.current