Why is the discover graph only available for 30 days?

In curator config.yml, indexes after 90 days of creation are to be deleted.


    action: delete_indices
    description: >-
      Delete indices older than 90 days (based on index name), for logs-
      prefixed indices. Ignore the error if the filter does not result in an
      actionable list of indices (ignore_empty_list) and exit cleanly.
      allow_ilm_indices: true
      ignore_empty_list: True
      disable_action: False
    - filtertype: pattern
      kind: regex
      value: logs*
    - filtertype: age
      source: creation_date
      direction: older
      unit: days
      unit_count: 90

For example, today is November 24, 2020
At 90 days, the start of the graph should be on August 24th or 25th.

As shown in the picture above, if the time range is set to 90 days or more, the graph of 30 days before is not visible.

Even after changing the setting to 60 days, the symptoms are the same.

How can I fix it?

I found a solution.

Curator existed in the vm called maintenance as well as the cluster_monitor vm, 
and it was supposed to delete_indice every 30 days in the actions.yml file there.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.