Watcher history index - use case and good practices

Elastic Stack Elasticsearch
1

Hi everyone,

I have enabled monitoring on my production cluster and pushing the logs to the monitoring cluster. But I see .watcher-history-7 index is getting created every day in my prod cluster. It would be great someone can enlighten me on the following points:

  • What is the use of this index?
  • Is it safe enough to delete these indexes? What is the safe period for us to persist this index?
2

every execution of a watch will result in a so called watch record. This watch record is indexed into the watch history in order to have a trail of watch executions.

If you enable monitoring and alerting can be run as well (based on your license), then monitoring will install some watches, i.e. to notify you about license expirations or running different versions of elasticsearch within the same cluster.

You can safely delete those indices.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.