Elasticsearch ILM无法滚动

阿卜杜勒海林

我已将ILM配置为当索引大小为20GB或在热节点中经过30天后会翻转

在此处输入图片说明

但是我的索引超过了20GB,但仍然没有传递给冷节点

在此处输入图片说明

当我跑步时:GET _cat/indices?v我得到:

green  open   packetbeat-7.9.2-2020.10.22-000001                         RRAnRZrrRZiihscJ3bymig  10   1   63833049            0     44.1gb           22gb

你能告诉我如何解决这个问题!

知道在我的packetbeat文件配置中,我刚刚更改了分片的数量:

setup.template.settings:
  index.number_of_shards: 10
  index.number_of_replicas: 1

当我运行命令时,GET packetbeat-7.9.2-2020.10.22-000001/_settings 我得到以下输出:

{
  "packetbeat-7.9.2-2020.10.22-000001" : {
    "settings" : {
      "index" : {
        "lifecycle" : {
          "name" : "packetbeat",
          "rollover_alias" : "packetbeat-7.9.2"
        },
        "routing" : {
          "allocation" : {
            "include" : {
              "_tier_preference" : "data_content"
            }
          }
        },
        "mapping" : {
          "total_fields" : {
            "limit" : "10000"
          }
        },
        "refresh_interval" : "5s",
        "number_of_shards" : "10",
        "provided_name" : "<packetbeat-7.9.2-{now/d}-000001>",
        "max_docvalue_fields_search" : "200",
        "query" : {
          "default_field" : [
            "message",
            "tags",
            "agent.ephemeral_id",
            "agent.id",
            "agent.name",
            "agent.type",
            "agent.version",
            "as.organization.name",
            "client.address",
            "client.as.organization.name",

该命令的输出GET /packetbeat-7.9.2-2020.10.22-000001/_ilm/explain 为:

{
  "indices" : {
    "packetbeat-7.9.2-2020.10.22-000001" : {
      "index" : "packetbeat-7.9.2-2020.10.22-000001",
      "managed" : true,
      "policy" : "packetbeat",
      "lifecycle_date_millis" : 1603359683835,
      "age" : "15.04d",
      "phase" : "hot",
      "phase_time_millis" : 1603359684332,
      "action" : "rollover",
      "action_time_millis" : 1603360173138,
      "step" : "check-rollover-ready",
      "step_time_millis" : 1603360173138,
      "phase_execution" : {
        "policy" : "packetbeat",
        "phase_definition" : {
          "min_age" : "0ms",
          "actions" : {
            "rollover" : {
              "max_size" : "50gb",
              "max_age" : "30d"
            }
          }
        },
        "version" : 1,
        "modified_date_in_millis" : 1603359683339
      }
    }
  }
}

奇怪的是50GB!

谢谢你的帮助

阿卜杜勒海林

所以我找到了解决这个问题的方法。更新策略后,我使用它从索引中删除了该策略,然后将其再次添加到那些索引中。

本文收集自互联网,转载请注明来源。

如有侵权,请联系 [email protected] 删除。

编辑于
0

我来说两句

0 条评论
登录 后参与评论

相关文章