No crea nuevo indice

Elastic In Your Native Tongue Elastic en Español
1

Hola.
Tengo un único nodo elastic donde almaceno los logs para luego tratarlos.
Hace unos días me quede sin espacio en el disco duro.

He liberado espacio y reiniciado el nodo.
Pero no se crean los nuevos índices (que se crean diariamente).

El Filebeat que suministra los logs funciona correctamente.

Me podéis indicar que puedo mirar.

Gracias

2

Mira los logs al arrancar Elasticsearch. Puede que no tengas aún espacio suficiente en el disco duro según la configuración de Elasticsearch.

Más detalles aquí:

3

Hola, Gracias por tu tiempo.
El disco duro que dispongo es de 362GB y dispongo de 136GB libres.

En el fichero elasticsearch.log veo la siguiente información, pero no se ver el error.

[2023-11-14T01:30:00,061][INFO ][o.e.x.m.MlDailyMaintenanceService] [log01] triggering scheduled [ML] maintenance tasks
[2023-11-14T01:30:00,480][INFO ][o.e.x.m.a.TransportDeleteExpiredDataAction] [log01] Deleting expired data
[2023-11-14T01:30:00,662][INFO ][o.e.x.m.j.r.UnusedStatsRemover] [log01] Successfully deleted [0] unused stats documents
[2023-11-14T01:30:00,664][INFO ][o.e.x.m.a.TransportDeleteExpiredDataAction] [log01] Completed deletion of expired ML data
[2023-11-14T01:30:00,664][INFO ][o.e.x.m.MlDailyMaintenanceService] [log01] Successfully completed [ML] maintenance task: triggerDeleteExpiredDataTask
[2023-11-14T02:30:00,027][INFO ][o.e.x.s.SnapshotRetentionTask] [log01] starting SLM retention snapshot cleanup task
[2023-11-14T02:30:00,089][INFO ][o.e.x.s.SnapshotRetentionTask] [log01] there are no repositories to fetch, SLM retention snapshot cleanup task complete
[2023-11-14T08:22:49,408][INFO ][o.e.n.Node               ] [log01] stopping ...
[2023-11-14T08:22:49,568][INFO ][o.e.x.w.WatcherService   ] [log01] stopping watch service, reason [shutdown initiated]
[2023-11-14T08:22:49,613][INFO ][o.e.x.w.WatcherLifeCycleService] [log01] watcher has stopped and shutdown
[2023-11-14T08:22:49,636][INFO ][o.e.x.m.p.l.CppLogMessageHandler] [log01] [controller/1480] [Main.cc@174] ML controller exiting
[2023-11-14T08:22:49,647][INFO ][o.e.x.m.p.NativeController] [log01] Native controller process has stopped - no new native processes can be started
[2023-11-14T08:22:53,990][INFO ][o.e.n.Node               ] [log01] stopped
[2023-11-14T08:22:53,993][INFO ][o.e.n.Node               ] [log01] closing ...
[2023-11-14T08:22:54,445][INFO ][o.e.i.g.DatabaseReaderLazyLoader] [log01] evicted [0] entries from cache after reloading database [/tmp/elasticsearch-3618000782347354184/geoip-databases/TjzW0TF0TrCMjj822G4Q5w/GeoLite2-Country.mmdb]
[2023-11-14T08:22:54,446][INFO ][o.e.i.g.DatabaseReaderLazyLoader] [log01] evicted [499] entries from cache after reloading database [/tmp/elasticsearch-3618000782347354184/geoip-databases/TjzW0TF0TrCMjj822G4Q5w/GeoLite2-ASN.mmdb]
[2023-11-14T08:22:54,447][INFO ][o.e.i.g.DatabaseReaderLazyLoader] [log01] evicted [501] entries from cache after reloading database [/tmp/elasticsearch-3618000782347354184/geoip-databases/TjzW0TF0TrCMjj822G4Q5w/GeoLite2-City.mmdb]
[2023-11-14T08:22:54,466][INFO ][o.e.n.Node               ] [log01] closed
[2023-11-14T08:24:07,522][INFO ][o.e.n.Node               ] [log01] version[7.17.8], pid[6360], build[default/deb/120eabe1c8a0cb2ae87cffc109a5b65d213e9df1/2022-12-02T17:33:09.727072865Z], OS[Linux/5.15.0-88-generic/amd64], JVM[Oracle Corporation/OpenJDK 64-Bit Server VM/19.0.1/19.0.1+10-21]
[2023-11-14T08:24:07,527][INFO ][o.e.n.Node               ] [log01] JVM home [/usr/share/elasticsearch/jdk], using bundled JDK [true]
[2023-11-14T08:24:07,527][INFO ][o.e.n.Node               ] [log01] JVM arguments [-Xshare:auto, -Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -XX:+ShowCodeDetailsInExceptionMessages, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Dlog4j2.formatMsgNoLookups=true, -Djava.locale.providers=SPI,COMPAT, --add-opens=java.base/java.io=ALL-UNNAMED, -Djava.security.manager=allow, -XX:+UseG1GC, -Djava.io.tmpdir=/tmp/elasticsearch-2623734107750500605, -XX:+HeapDumpOnOutOfMemoryError, -XX:+ExitOnOutOfMemoryError, -XX:HeapDumpPath=/var/lib/elasticsearch, -XX:ErrorFile=/var/log/elasticsearch/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=/var/log/elasticsearch/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -Xms7994m, -Xmx7994m, -XX:MaxDirectMemorySize=4192206848, -XX:G1HeapRegionSize=4m, -XX:InitiatingHeapOccupancyPercent=30, -XX:G1ReservePercent=15, -Des.path.home=/usr/share/elasticsearch, -Des.path.conf=/etc/elasticsearch, -Des.distribution.flavor=default, -Des.distribution.type=deb, -Des.bundled_jdk=true]
[2023-11-14T08:24:10,813][INFO ][o.e.p.PluginsService     ] [log01] loaded module [aggs-matrix-stats]
[2023-11-14T08:24:10,813][INFO ][o.e.p.PluginsService     ] [log01] loaded module [analysis-common]
[2023-11-14T08:24:10,814][INFO ][o.e.p.PluginsService     ] [log01] loaded module [constant-keyword]
[2023-11-14T08:24:10,814][INFO ][o.e.p.PluginsService     ] [log01] loaded module [frozen-indices]
[2023-11-14T08:24:10,814][INFO ][o.e.p.PluginsService     ] [log01] loaded module [ingest-common]
[2023-11-14T08:24:10,814][INFO ][o.e.p.PluginsService     ] [log01] loaded module [ingest-geoip]
[2023-11-14T08:24:10,814][INFO ][o.e.p.PluginsService     ] [log01] loaded module [ingest-user-agent]
[2023-11-14T08:24:10,815][INFO ][o.e.p.PluginsService     ] [log01] loaded module [kibana]
[2023-11-14T08:24:10,815][INFO ][o.e.p.PluginsService     ] [log01] loaded module [lang-expression]
[2023-11-14T08:24:10,815][INFO ][o.e.p.PluginsService     ] [log01] loaded module [lang-mustache]
[2023-11-14T08:24:10,815][INFO ][o.e.p.PluginsService     ] [log01] loaded module [lang-painless]
[2023-11-14T08:24:10,816][INFO ][o.e.p.PluginsService     ] [log01] loaded module [legacy-geo]
[2023-11-14T08:24:10,816][INFO ][o.e.p.PluginsService     ] [log01] loaded module [mapper-extras]
[2023-11-14T08:24:10,816][INFO ][o.e.p.PluginsService     ] [log01] loaded module [mapper-version]
[2023-11-14T08:24:10,816][INFO ][o.e.p.PluginsService     ] [log01] loaded module [parent-join]
[2023-11-14T08:24:10,816][INFO ][o.e.p.PluginsService     ] [log01] loaded module [percolator]
[2023-11-14T08:24:10,817][INFO ][o.e.p.PluginsService     ] [log01] loaded module [rank-eval]
[2023-11-14T08:24:10,817][INFO ][o.e.p.PluginsService     ] [log01] loaded module [reindex]
[2023-11-14T08:24:10,817][INFO ][o.e.p.PluginsService     ] [log01] loaded module [repositories-metering-api]
[2023-11-14T08:24:10,817][INFO ][o.e.p.PluginsService     ] [log01] loaded module [repository-encrypted]
[2023-11-14T08:24:10,818][INFO ][o.e.p.PluginsService     ] [log01] loaded module [repository-url]
[2023-11-14T08:24:10,818][INFO ][o.e.p.PluginsService     ] [log01] loaded module [runtime-fields-common]
[2023-11-14T08:24:10,818][INFO ][o.e.p.PluginsService     ] [log01] loaded module [search-business-rules]
[2023-11-14T08:24:10,818][INFO ][o.e.p.PluginsService     ] [log01] loaded module [searchable-snapshots]
[2023-11-14T08:24:10,818][INFO ][o.e.p.PluginsService     ] [log01] loaded module [snapshot-repo-test-kit]
[2023-11-14T08:24:10,819][INFO ][o.e.p.PluginsService     ] [log01] loaded module [spatial]
[2023-11-14T08:24:10,819][INFO ][o.e.p.PluginsService     ] [log01] loaded module [systemd]
[2023-11-14T08:24:10,819][INFO ][o.e.p.PluginsService     ] [log01] loaded module [transform]
[2023-11-14T08:24:10,819][INFO ][o.e.p.PluginsService     ] [log01] loaded module [transport-netty4]
[2023-11-14T08:24:10,820][INFO ][o.e.p.PluginsService     ] [log01] loaded module [unsigned-long]
[2023-11-14T08:24:10,820][INFO ][o.e.p.PluginsService     ] [log01] loaded module [vector-tile]
[2023-11-14T08:24:10,820][INFO ][o.e.p.PluginsService     ] [log01] loaded module [vectors]
[2023-11-14T08:24:10,820][INFO ][o.e.p.PluginsService     ] [log01] loaded module [wildcard]
[2023-11-14T08:24:10,820][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-aggregate-metric]
[2023-11-14T08:24:10,821][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-analytics]
[2023-11-14T08:24:10,821][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-async]
[2023-11-14T08:24:10,821][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-async-search]
[2023-11-14T08:24:10,821][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-autoscaling]
[2023-11-14T08:24:10,822][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-ccr]
[2023-11-14T08:24:10,822][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-core]
[2023-11-14T08:24:10,822][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-data-streams]
[2023-11-14T08:24:10,822][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-deprecation]
[2023-11-14T08:24:10,822][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-enrich]
[2023-11-14T08:24:10,823][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-eql]
[2023-11-14T08:24:10,823][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-fleet]
[2023-11-14T08:24:10,823][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-graph]
[2023-11-14T08:24:10,823][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-identity-provider]
[2023-11-14T08:24:10,824][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-ilm]
[2023-11-14T08:24:10,824][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-logstash]
[2023-11-14T08:24:10,824][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-ml]
[2023-11-14T08:24:10,824][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-monitoring]
[2023-11-14T08:24:10,824][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-ql]
[2023-11-14T08:24:10,825][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-rollup]
[2023-11-14T08:24:10,825][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-security]
[2023-11-14T08:24:10,825][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-shutdown]
[2023-11-14T08:24:10,825][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-sql]
[2023-11-14T08:24:10,825][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-stack]
[2023-11-14T08:24:10,826][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-text-structure]
[2023-11-14T08:24:10,826][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-voting-only-node]
[2023-11-14T08:24:10,826][INFO ][o.e.p.PluginsService     ] [log01] loaded module [x-pack-watcher]
[2023-11-14T08:24:10,827][INFO ][o.e.p.PluginsService     ] [log01] no plugins loaded
[2023-11-14T08:24:10,876][INFO ][o.e.e.NodeEnvironment    ] [log01] using [1] data paths, mounts [[/var (/dev/sda4)]], net usable_space [138.3gb], net total_space [361.1gb], types [ext4]
[2023-11-14T08:24:10,877][INFO ][o.e.e.NodeEnvironment    ] [log01] heap size [7.8gb], compressed ordinary object pointers [true]
[2023-11-14T08:24:11,272][INFO ][o.e.n.Node               ] [log01] node name [log01], node ID [TjzW0TF0TrCMjj822G4Q5w], cluster name [elasticsearch], roles [transform, data_frozen, master, remote_cluster_client, data, ml, data_content, data_hot, data_warm, data_cold, ingest]
[2023-11-14T08:24:17,703][INFO ][o.e.x.m.p.l.CppLogMessageHandler] [log01] [controller/6554] [Main.cc@122] controller (64 bit): Version 7.17.8-SNAPSHOT (Build cb1857d3d2374a) Copyright (c) 2022 Elasticsearch BV
[2023-11-14T08:24:18,664][INFO ][o.e.x.s.a.s.FileRolesStore] [log01] parsed [0] roles from file [/etc/elasticsearch/roles.yml]
[2023-11-14T08:24:19,531][INFO ][o.e.i.g.ConfigDatabases  ] [log01] initialized default databases [[GeoLite2-Country.mmdb, GeoLite2-City.mmdb, GeoLite2-ASN.mmdb]], config databases [[]] and watching [/etc/elasticsearch/ingest-geoip] for changes
[2023-11-14T08:24:19,533][INFO ][o.e.i.g.DatabaseNodeService] [log01] initialized database registry, using geoip-databases directory [/tmp/elasticsearch-2623734107750500605/geoip-databases/TjzW0TF0TrCMjj822G4Q5w]
[2023-11-14T08:24:20,432][INFO ][o.e.t.NettyAllocator     ] [log01] creating NettyAllocator with the following configs: [name=elasticsearch_configured, chunk_size=1mb, suggested_max_allocation_size=1mb, factors={es.unsafe.use_netty_default_chunk_and_page_size=false, g1gc_enabled=true, g1gc_region_size=4mb}]
[2023-11-14T08:24:20,466][INFO ][o.e.i.r.RecoverySettings ] [log01] using rate limit [40mb] with [default=40mb, read=0b, write=0b, max=0b]
[2023-11-14T08:24:20,517][INFO ][o.e.d.DiscoveryModule    ] [log01] using discovery type [single-node] and seed hosts providers [settings]
[2023-11-14T08:24:21,067][INFO ][o.e.g.DanglingIndicesState] [log01] gateway.auto_import_dangling_indices is disabled, dangling indices will not be automatically detected or imported and must be managed manually
[2023-11-14T08:24:21,977][INFO ][o.e.n.Node               ] [log01] initialized
[2023-11-14T08:24:21,977][INFO ][o.e.n.Node               ] [log01] starting ...
[2023-11-14T08:24:21,997][INFO ][o.e.x.s.c.f.PersistentCache] [log01] persistent cache index loaded
[2023-11-14T08:24:21,998][INFO ][o.e.x.d.l.DeprecationIndexingComponent] [log01] deprecation component started
[2023-11-14T08:24:22,127][INFO ][o.e.t.TransportService   ] [log01] publish_address {127.0.0.1:9300}, bound_addresses {[::1]:9300}, {127.0.0.1:9300}
[2023-11-14T08:24:26,055][INFO ][o.e.c.c.Coordinator      ] [log01] cluster UUID [XpH21KFDT0-N6ddETcxiEg]
[2023-11-14T08:24:26,205][INFO ][o.e.c.s.MasterService    ] [log01] elected-as-master ([1] nodes joined)[{log01}{TjzW0TF0TrCMjj822G4Q5w}{vkD11imyQ-WH3FUCMzziaQ}{127.0.0.1}{127.0.0.1:9300}{cdfhilmrstw} elect leader, _BECOME_MASTER_TASK_, _FINISH_ELECTION_], term: 54, version: 26660, delta: master node changed {previous [], current [{log01}{TjzW0TF0TrCMjj822G4Q5w}{vkD11imyQ-WH3FUCMzziaQ}{127.0.0.1}{127.0.0.1:9300}{cdfhilmrstw}]}
[2023-11-14T08:24:26,538][INFO ][o.e.c.s.ClusterApplierService] [log01] master node changed {previous [], current [{log01}{TjzW0TF0TrCMjj822G4Q5w}{vkD11imyQ-WH3FUCMzziaQ}{127.0.0.1}{127.0.0.1:9300}{cdfhilmrstw}]}, term: 54, version: 26660, reason: Publication{term=54, version=26660}
[2023-11-14T08:24:26,643][INFO ][o.e.h.AbstractHttpServerTransport] [log01] publish_address {127.0.0.1:9200}, bound_addresses {[::1]:9200}, {127.0.0.1:9200}
[2023-11-14T08:24:26,644][INFO ][o.e.n.Node               ] [log01] started
[2023-11-14T08:24:27,793][INFO ][o.e.l.LicenseService     ] [log01] license [07ce6f06-9110-438e-9c16-2bf7aa52915e] mode [basic] - valid
[2023-11-14T08:24:27,795][INFO ][o.e.x.s.s.SecurityStatusChangeListener] [log01] Active license is now [BASIC]; Security is disabled
[2023-11-14T08:24:27,795][WARN ][o.e.x.s.s.SecurityStatusChangeListener] [log01] Elasticsearch built-in security features are not enabled. Without authentication, your cluster could be accessible to anyone. See https://www.elastic.co/guide/en/elasticsearch/reference/7.17/security-minimal-setup.html to enable security.
[2023-11-14T08:24:27,821][INFO ][o.e.g.GatewayService     ] [log01] recovered [49] indices into cluster_state
[2023-11-14T08:24:28,365][ERROR][o.e.i.g.GeoIpDownloader  ] [log01] exception during geoip databases update
org.elasticsearch.ElasticsearchException: not all primary shards of [.geoip_databases] index are active
	at org.elasticsearch.ingest.geoip.GeoIpDownloader.updateDatabases(GeoIpDownloader.java:137) ~[ingest-geoip-7.17.8.jar:7.17.8]
	at org.elasticsearch.ingest.geoip.GeoIpDownloader.runDownloader(GeoIpDownloader.java:284) [ingest-geoip-7.17.8.jar:7.17.8]
	at org.elasticsearch.ingest.geoip.GeoIpDownloaderTaskExecutor.nodeOperation(GeoIpDownloaderTaskExecutor.java:100) [ingest-geoip-7.17.8.jar:7.17.8]
	at org.elasticsearch.ingest.geoip.GeoIpDownloaderTaskExecutor.nodeOperation(GeoIpDownloaderTaskExecutor.java:46) [ingest-geoip-7.17.8.jar:7.17.8]
	at org.elasticsearch.persistent.NodePersistentTasksExecutor$1.doRun(NodePersistentTasksExecutor.java:42) [elasticsearch-7.17.8.jar:7.17.8]
	at org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRunnable.doRun(ThreadContext.java:777) [elasticsearch-7.17.8.jar:7.17.8]
	at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:26) [elasticsearch-7.17.8.jar:7.17.8]
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144) [?:?]
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642) [?:?]
	at java.lang.Thread.run(Thread.java:1589) [?:?]
[2023-11-14T08:24:28,645][INFO ][o.e.i.g.DatabaseNodeService] [log01] retrieve geoip database [GeoLite2-Country.mmdb] from [.geoip_databases] to [/tmp/elasticsearch-2623734107750500605/geoip-databases/TjzW0TF0TrCMjj822G4Q5w/GeoLite2-Country.mmdb.tmp.gz]
[2023-11-14T08:24:28,647][INFO ][o.e.i.g.DatabaseNodeService] [log01] retrieve geoip database [GeoLite2-City.mmdb] from [.geoip_databases] to [/tmp/elasticsearch-2623734107750500605/geoip-databases/TjzW0TF0TrCMjj822G4Q5w/GeoLite2-City.mmdb.tmp.gz]
[2023-11-14T08:24:28,648][INFO ][o.e.i.g.DatabaseNodeService] [log01] retrieve geoip database [GeoLite2-ASN.mmdb] from [.geoip_databases] to [/tmp/elasticsearch-2623734107750500605/geoip-databases/TjzW0TF0TrCMjj822G4Q5w/GeoLite2-ASN.mmdb.tmp.gz]
[2023-11-14T08:24:28,980][INFO ][o.e.i.g.DatabaseNodeService] [log01] successfully reloaded changed geoip database file [/tmp/elasticsearch-2623734107750500605/geoip-databases/TjzW0TF0TrCMjj822G4Q5w/GeoLite2-Country.mmdb]
[2023-11-14T08:24:29,026][INFO ][o.e.i.g.DatabaseNodeService] [log01] successfully reloaded changed geoip database file [/tmp/elasticsearch-2623734107750500605/geoip-databases/TjzW0TF0TrCMjj822G4Q5w/GeoLite2-ASN.mmdb]
[2023-11-14T08:24:30,416][INFO ][o.e.i.g.DatabaseNodeService] [log01] successfully reloaded changed geoip database file [/tmp/elasticsearch-2623734107750500605/geoip-databases/TjzW0TF0TrCMjj822G4Q5w/GeoLite2-City.mmdb]
[2023-11-14T08:24:51,316][INFO ][o.e.c.r.a.AllocationService] [log01] Cluster health status changed from [RED] to [GREEN] (reason: [shards started [[filebeat-7.17.10-2023.09.17-000112][0]]]).

He lanzado el comando GET _cat/indices/filebeat-7.17.10

#! Elasticsearch built-in security features are not enabled. Without authentication, your cluster could be accessible to anyone. See https://www.elastic.co/guide/en/elasticsearch/reference/7.17/security-minimal-setup.html to enable security.
green open filebeat-7.17.10-2023.09.24-000119 drK0dnyFRfGCv0JLxjlJbg 1 0 11217673 0 5.6gb 5.6gb
green open filebeat-7.17.10-2023.09.22-000117 Ieuc2RFwQWiR80u8L-pnQw 1 0  8928588 0 4.3gb 4.3gb
green open filebeat-7.17.10-2023.09.23-000118 cQ-0JvgOTKufBOKvTnxaUQ 1 0  8307303 0   4gb   4gb
green open filebeat-7.17.10-2023.09.20-000115 qnvTxi4DQGWHdhlRUjmz8w 1 0 14419656 0 7.7gb 7.7gb
green open filebeat-7.17.10-2023.09.21-000116 qEqgPhDTQTaYogDFcnVDDg 1 0 13446546 0 7.2gb 7.2gb
green open filebeat-7.17.10-2023.09.28-000123 -W856pxQQe-8lvL2ztC5Xw 1 0 14315065 0 7.5gb 7.5gb
green open filebeat-7.17.10-2023.09.27-000122 IS0rx9XiRr604ZojU7d2Hw 1 0 13911677 0 7.4gb 7.4gb
green open filebeat-7.17.10-2023.09.26-000121 9WFMCSVmQ3mQsg4d4j3IWw 1 0 13988074 0 7.5gb 7.5gb
green open filebeat-7.17.10-2023.09.25-000120 IfL-cxSJR7W7m5-u31tMeQ 1 0 14437924 0 7.7gb 7.7gb
green open filebeat-7.17.10-2023.09.29-000124 Yn4V2GwHQzKzsa27BksqsQ 1 0  9293410 0 4.3gb 4.3gb
green open filebeat-7.17.10-2023.10.01-000126 bjwLvoOnSvSXZ7p2eJo0BA 1 0 11839142 0 6.4gb 6.4gb
green open filebeat-7.17.10-2023.10.02-000127 IiVz-5omS_-S6kef3yJagg 1 0 12670104 0 6.8gb 6.8gb
green open filebeat-7.17.10-2023.10.04-000129 UMYL9flIRgelrRNm46fJvg 1 0 14001016 0 7.3gb 7.3gb
green open filebeat-7.17.10-2023.10.03-000128 PuZIZzJ0Ti2bJnvCv66sCw 1 0 14377853 0 7.6gb 7.6gb
green open filebeat-7.17.10-2023.09.30-000125 O19TkC3mSu2UihabH96iEw 1 0 10833896 0 4.7gb 4.7gb
green open filebeat-7.17.10-2023.10.08-000133 cNV5r8O2Ru6bkblO6JEfHA 1 0 13971668 0 7.5gb 7.5gb
green open filebeat-7.17.10-2023.10.09-000134 aclj3zv1RC6lgg_IMj-9NQ 1 0 13886395 0 7.6gb 7.6gb
green open filebeat-7.17.10-2023.10.07-000132 NdQ0HX8aTciMslsrRJgvPw 1 0  9397888 0 4.3gb 4.3gb
green open filebeat-7.17.10-2023.10.05-000130 v3ZxjAGzSF-lMBPGik0GSQ 1 0 13276031 0   7gb   7gb
green open filebeat-7.17.10-2023.10.06-000131 578K1KqgQke2_Qi_xP44wQ 1 0  8319342 0 3.9gb 3.9gb
green open filebeat-7.17.10-2023.10.14-000139 sg3dIvE4SHuZZ-rpNlXtRQ 1 0  8769646 0 4.1gb 4.1gb
green open filebeat-7.17.10-2023.10.13-000138 W0tjNtO6QG-z5IiIm-PL_w 1 0  9417122 0 4.4gb 4.4gb
green open filebeat-7.17.10-2023.09.19-000114 UpiPwAZdT8yNIllab0dVaw 1 0 14500905 0 7.9gb 7.9gb
green open filebeat-7.17.10-2023.10.10-000135 Z7S0GnopSG6ub_XpO3_-Ow 1 0 13489227 0 7.2gb 7.2gb
green open filebeat-7.17.10-2023.09.18-000113 8InjJhYXTi6aUS7MiRUcGA 1 0 13486908 0 7.3gb 7.3gb
green open filebeat-7.17.10-2023.09.17-000112 hWpj6qwHROOgA565gRA_Xg 1 0 14520167 0   8gb   8gb
green open filebeat-7.17.10-2023.10.12-000137 zpbOOIQ3SH6P7QY1OwJ1vA 1 0 13035204 0 6.8gb 6.8gb
green open filebeat-7.17.10-2023.10.11-000136 z-zet-JNQCiOnPmWwSm-JA 1 0  9157610 0 4.3gb 4.3gb
type or paste code here

He lanzado el comando GET _cat/aliases/filebeat-7.17.10?v y todos los indices
indican "is_write_index false"

Ejecuto el siguiente comando para que poner el ultimo indice disponible a true

POST /_aliases
{
"actions" : [
    {
        "add" : {
             "index" : "filebeat-7.17.10-2023.10.14-000139",
             "alias" : "filebeat-7.17.10",
             "is_write_index" : true
        }
    }
  ]
}

En este momento el indice filebeat-7.17.10-2023.10.14-000139 empieza a almacenar datos.

Cuando pasan 24 horas el indice que almacena datos sigue siendo el mismo, no ha creado un índice diario nuevo, como hacia antes.

Que puedo revisar

Gracias

4

Hola
He aplicado el siguiente comando y ha creado el nuevo índice con fecha de hoy

POST filebeat-7.17.10/_rollover

Un saludo

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.