Retention of -ds.monitoring*

Elastic Stack Elasticsearch
1

Unfortunately our indices created by Metricbeat 8 are not cleaned up, although the policy looks ok. Looking at the responsible policy I'd expect the indices to be deleted after 6 days, but they're not and we need to cleanup manually. Anything missing?

{
  ".monitoring-8-ilm-policy": {
    "policy": {
      "phases": {
        "hot": {
          "actions": {
            "rollover": {
              "max_age": "3d",
              "max_primary_shard_size": "50gb"
            }
          },
          "min_age": "0ms"
        },
        "warm": {
          "actions": {
            "forcemerge": {
              "max_num_segments": 1
            }
          },
          "min_age": "0ms"
        },
        "delete": {
          "actions": {
            "delete": {
              "delete_searchable_snapshot": true
            }
          },
          "min_age": "3d"
        }
      },
      "_meta": {
        "description": "Index lifecycle policy generated for [monitoring-*-8] data streams",
        "defaults": {
          "delete_min_age": "Using value of [3d] based on the value of the [xpack.monitoring.history.duration] setting at node startup"
        }
      }
    },

Using Azure Elastic Cloud 8.5.3.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.