弹性未滚动

7gyucuyw  于 2021-06-10  发布在  ElasticSearch
关注(0)|答案(1)|浏览(253)

我已将我的ilm配置为当索引大小为20gb或在热节点中超过30天后滚动

但是我的索引通过了20gb,仍然没有通过冷节点

当我跑的时候: GET _cat/indices?v 我得到:

green  open   packetbeat-7.9.2-2020.10.22-000001                         RRAnRZrrRZiihscJ3bymig  10   1   63833049            0     44.1gb           22gb

你能告诉我怎么解决这个问题吗!
知道在我的packetbeat文件配置中,我刚刚更改了碎片的数量:

setup.template.settings:
  index.number_of_shards: 10
  index.number_of_replicas: 1

当我运行命令时 GET packetbeat-7.9.2-2020.10.22-000001/_settings 我得到这个输出:

{
  "packetbeat-7.9.2-2020.10.22-000001" : {
    "settings" : {
      "index" : {
        "lifecycle" : {
          "name" : "packetbeat",
          "rollover_alias" : "packetbeat-7.9.2"
        },
        "routing" : {
          "allocation" : {
            "include" : {
              "_tier_preference" : "data_content"
            }
          }
        },
        "mapping" : {
          "total_fields" : {
            "limit" : "10000"
          }
        },
        "refresh_interval" : "5s",
        "number_of_shards" : "10",
        "provided_name" : "<packetbeat-7.9.2-{now/d}-000001>",
        "max_docvalue_fields_search" : "200",
        "query" : {
          "default_field" : [
            "message",
            "tags",
            "agent.ephemeral_id",
            "agent.id",
            "agent.name",
            "agent.type",
            "agent.version",
            "as.organization.name",
            "client.address",
            "client.as.organization.name",

以及命令的输出 GET /packetbeat-7.9.2-2020.10.22-000001/_ilm/explain 是:

{
  "indices" : {
    "packetbeat-7.9.2-2020.10.22-000001" : {
      "index" : "packetbeat-7.9.2-2020.10.22-000001",
      "managed" : true,
      "policy" : "packetbeat",
      "lifecycle_date_millis" : 1603359683835,
      "age" : "15.04d",
      "phase" : "hot",
      "phase_time_millis" : 1603359684332,
      "action" : "rollover",
      "action_time_millis" : 1603360173138,
      "step" : "check-rollover-ready",
      "step_time_millis" : 1603360173138,
      "phase_execution" : {
        "policy" : "packetbeat",
        "phase_definition" : {
          "min_age" : "0ms",
          "actions" : {
            "rollover" : {
              "max_size" : "50gb",
              "max_age" : "30d"
            }
          }
        },
        "version" : 1,
        "modified_date_in_millis" : 1603359683339
      }
    }
  }
}

它的50gb真奇怪!!
谢谢你的帮助

dz6r00yl

dz6r00yl1#

所以我找到了解决这个问题的方法。更新策略后,我使用它从索引中删除了策略,然后再次将其添加到这些索引中。

相关问题